Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!samsung!shadooby!netnews.engin.umich.edu!news
From: mystone@mondo.engin.umich.edu (Dean Yu)
Newsgroups: comp.sys.mac
Subject: Re: I'm not sure I believe this. (was Re: New WDEF Virus)
Message-ID: <1989Dec13.213954.24156@caen.engin.umich.edu>
Date: 13 Dec 89 21:39:54 GMT
References: <3277@hub.UUCP> <1501@rodan.acs.syr.edu> <4221@sbcs.sunysb.edu> <1989Dec12.044029.19171@eng.umd.edu> <1748@ultb.isc.rit.edu>
Sender: news@caen.engin.umich.edu (USENET News System)
Reply-To: mystone@caen.engin.umich.edu
Organization: Computer Aided Engineering Network, University of Michigan
Lines: 23

In article <1748@ultb.isc.rit.edu> jjw7384@ultb.isc.rit.edu (J.J. Wasilko) writes:
>Whenever I install the SuperSpoll DA (which contains a WDEF) Vaccine
>always catches it. It also catches the fact that WinChooser is adding a
>WDEF resource.
>
>Why doesn't it catch the addition of a WDEF resource to the Desktop
>file?
>
>Jeff

  Because the WDEFs from SuperSpool and WindChooser are normal WDEFs and
don't do anything to prevent Vaccine from warning you about it, which is
the way it should be.  The WDEF virus knows about Vaccine and GateKeeper
and performs specific actions to bypass them, which is why neither flags
the addition of a WDEF to your Desktop.

_______________________________________________________________________________
Dean Yu                            | E-mail: mystone@caen.engin.umich.edu
Self-declared License Czar         | Real-mail: Dean Yu
University of Michigan             |            909 Church St
Computer Aided Engineering Network |            Apt C
     INCLUDE 'Disclaimers.a'       |            Ann Arbor, MI 48104
-------------------------------------------------------------------------------