Path: utzoo!yunexus!ists!jarvis.csri.toronto.edu!mailrus!accuvax.nwu.edu!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: SOUTHALL@AUVM.BITNET (Tom Southall)
Newsgroups: comp.virus
Subject: Help needed on Mac virus attack (Mac)
Message-ID: <0004.8911171251.AA11880@ge.sei.cmu.edu>
Date: 16 Nov 89 14:19:27 GMT
Article-I.D.: ge.0004.8911171251.AA11880
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 25
Approved: krvw@sei.cmu.edu

Hello,

We are being hit by a Mac virus that is not recognized by our vaccine
programs (Disinfectant, etc.).  The symptoms we see, in order of
severity (age?) of the virus are:

1. System file date changes to current date
2. All printing services are degraded
3. File can not be opened - but is visible
4. Open files can not be saved
5. Machine freezes in the middle of doing work
6. Names of infected files are changed to *'s

The virus appears to be passed through data files and/or through our
Appletalk network.  We have reformatted all disks and fixed the
server, but the virus re-appears very quickly.

Any ideas as to what this might be, and how to get rid of it would be
greatly appreciated.  Thank you,

Tom Southall
Manager, User Services
The American University
Washington, DC  20016
(202) 885-2277