Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!mailrus!cs.utexas.edu!wuarchive!gem.mps.ohio-state.edu!uakari.primate.wisc.edu!polyslo!vlsi3b15!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: XRJDM%SCFVM.BITNET@VMA.CC.CMU.EDU (Joe McMahon)
Newsgroups: comp.virus
Subject: New Mac Virus - Further Diagnostic Help
Message-ID: <0008.8910041808.AA09177@ge.sei.cmu.edu>
Date: 4 Oct 89 13:51:17 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 5
Approved: krvw@sei.cmu.edu

Try using GateKeeper and shutting down ALL accesses to files. See if
that will show you what's being copied into the files. It should be
in the GateKeeper Log.

 --- Joe M.