Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!samsung!uunet!mcsun!sunic!tut!santra!kampi.hut.fi!jmunkki
From: jmunkki@kampi.hut.fi (Juri Munkki)
Newsgroups: comp.sys.mac
Subject: Re: More fuel to the WDEF virus fire
Message-ID: <1989Dec11.214730.22537@santra.uucp>
Date: 11 Dec 89 21:47:30 GMT
References: <6140@wpi.wpi.edu> <3687@mace.cc.purdue.edu>
Sender: news@santra.uucp (Cnews - USENET news system)
Reply-To: jmunkki@kampi.hut.fi (Juri Munkki)
Organization: Helsinki University of Technology, Finland
Lines: 18

If you are unwilling to use the INIT that I posted, you could try a
very simple cure to the problem by installing Apple's WDEF 0 from
the System file to the Desktop file. You could try to make it locked
so that the virus will not replace it with its own copy.

Disclaimer: I don't have a copy of the WDEF virus, since our university
	    appears to be free of it, but the above method should work,
	    if the information posted here is correct and my theory on
	    how the virus works is correct.

I recommend trying my init. If you discover that it works, please let me
know. I'll write a new one, if you have problems with the current version.
At least I'll be prepared when the virus arrives in Finland.

_._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._
|     Juri Munkki jmunkki@hut.fi  jmunkki@fingate.bitnet        I Want   Ne   |
|     Helsinki University of Technology Computing Centre        My Own   XT   |
^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^~^