Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!usc!brutus.cs.uiuc.edu!lll-winken!decwrl!shelby!neon!evans From: evans@Neon.Stanford.EDU (John S. Evans) Newsgroups: comp.sys.mac Subject: WDEF Virus... Message-ID: <1989Dec8.011013.2414@Neon.Stanford.EDU> Date: 8 Dec 89 01:10:13 GMT Sender: USENET News System Reply-To: evans@neon.stanford.edu () Organization: Computer Science Department, Stanford University Lines: 29 Keywords:virus Howdy. I'm working here at Stanford University, and we have (we think) found this new virus everywhere. We also downloaded a copy of the Eradicator! init, and are having MAJOR problems getting the sucker to work. We convert it to mac format with Stuffit 1.5.1, unBinHexing, and use RESEDIT to insert the INIT in the file's TYPE field. When we boot a mac II (or IIcx) with this init and insert a probably-infected floppy disk, the init hangs, after giving us the warning (3 beeps...) Also, if we boot a floppy with the init on a system with an infected hard disk, the init hangs at the same point. In both cases, the hang occurs after the inits are done loading, and the infected disk is attempting to mount. Any help would be greatly appreciated, as we believe this virus to be a major source of the errors we have been getting lately... Thanks! -- John S. Evans | "Are you suggesting coconuts migrate?" evans@neon.stanford.edu | MS Computer Science Student | Stanford University |