Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!brutus.cs.uiuc.edu!psuvax1!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: C0195@UNIVSCVM.BITNET (Gregory E. Gilbert)
Newsgroups: comp.virus
Subject: WDEF Virus (Mac)
Message-ID: <0006.8912081922.AA21833@ge.sei.cmu.edu>
Date: 8 Dec 89 16:42:58 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 23
Approved: krvw@sei.cmu.edu

Recently there was a posting on VALERT-L about a new virues, WDEF.  In the
alert it is mentioned that:

(stuff deleted)

"Jeff Shulman, the author of Virus Detective 3.1, recommends adding the
following search string to detect the virus:

CREATOR=ERIK & Resource WDEF & Any

Virus Detective can also be used to remove the virus ......"

Where or to what do we add the "following search string".  Please
pardon my ignorance.

Greg

Postal address:   Gregory E. Gilbert
                  Computer Services Division
                  University of South Carolina
                  Columbia, South Carolina   USA   29208
                  (803) 777-6015
Acknowledge-To: <C0195@UNIVSCVM>