Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!mailrus!iuvax!cica!tut.cis.ohio-state.edu!gem.mps.ohio-state.edu!apple!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: mmccann@hubcap.clemson.edu (Mike McCann)
Newsgroups: comp.virus
Subject: Re: Macintosh Virus
Message-ID: <0005.8909201159.AA11951@ge.sei.cmu.edu>
Date: 20 Sep 89 03:32:15 GMT
Lines: 45
Approved: krvw@sei.cmu.edu

In article <0001.8909191859.AA09184@ge.sei.cmu.edu>, JOHN P. BRADLEY writes:
>      Well it was bound to happen - why should we be any different?  We
> believe we have discovered a virus in our microcomputer lab.  So far, we
> have only found one contaminated diskette.  This is a MAC station disk
> used for booting a MAC to work with Appleshare.  We ran VIRUS Rx and it
> confirmed a user's suspicion.  The report from VIRUS Rx detected the
> presence of the SCORES virus (or so it seemed to indicate).
>      Has anyone else had a similar experience and could offer any ideas
> on how to proceed?  At present, we are beginning to check all station disks
> and offering to check any user's disks for a virus.  Next step, is
> education of the users, hoping that this won't get out of hand.

Our Macintosh labs were hit rather hard by the Scores virus quite some
time ago and the steps we took to get rid of the virus seemed to work
rather well:

1)  Remove the virus from all infected hard drives and boot diskettes
    with a good anti-virus program like Disinfectant (I only wish it was
    available then).

2)  Place a memory resident anti-virus program (like Vaccine or
    GateKeeper) on all hard drives and boot diskettes.

3)  Examine every diskette a student brings into the lab to use on the
    computers.  It only takes a few seconds to scan a floppy disk and
    the user is usually happy to know that all of his/her disks are
    virus free.

4)  Continue to scan all hard drives and boot diskettes for viruses on
    a regular basis for a while (not all students think it is important
    that you check all of their diskettes).

5)  Distibute copies of anti-virus program to the users.  Most ShareWare
    anti-virus programs are free and perform better than any commercial
    anti-virus programs that I have tested (my personal preferences are
    toward Disinfectant and Vaccine).

This should help keep your labs virus free.

Hope this helps,
- --
Mike McCann       (803) 656-3714   Internet = mmccann@hubcap.clemson.edu
Poole Computer Center (Box P-21)       UUCP = gatech!hubcap!mmccann
Clemson University                   Bitnet = mmccann@clemson.bitnet
Clemson, S.C. 29634-2803         DISCLAIMER = I speak only for myself.