Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!samsung!think!ames!ncar!tank!cps3xx!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: dplatt@coherent.com Newsgroups: comp.virus Subject: Re: WDEF Virus (Mac) Message-ID: <0003.8912121301.AA15254@ge.sei.cmu.edu> Date: 11 Dec 89 19:25:26 GMT Sender: Virus Discussion List Lines: 35 Approved: krvw@sei.cmu.edu > "Jeff Shulman, the author of Virus Detective 3.1, recommends adding the > following search string to detect the virus: > > CREATOR=ERIK & Resource WDEF & Any > > Virus Detective can also be used to remove the virus ......" > > Where or to what do we add the "following search string". Please > pardon my ignorance. Assuming that you have a relatively recent version of VirusDetective, you can open the desk accessory, click the "Modify Search Strings" button (or enter command-M), type the above string into the one-line field near the bottom of the search-string dialog box, click the "Add" button to add the string to the working search criteria, and then click the "Save" button to record the new criteria in the desk accessory's long-term memory (in the System file). You can then search disks, or individual Desktop files, using the buttons in the desk accessory's main window. If you're hunting for the WDEF virus, you should _not_ do so under MultiFinder... run in the "uni-Finder" environment, launch an application program (almost any will do), and then invoke VirusDetective from within that application. You should _not_ be running the Finder (multi- or uni-) if you wish to remove the WDEF virus from your Desktop file. Disinfectant 1.4 is now available, by the way... it, also, can find and eliminate WDEF. - -- Dave Platt VOICE: (415) 493-8805 UUCP: ...!{ames,apple,uunet}!coherent!dplatt DOMAIN: dplatt@coherent.com INTERNET: coherent!dplatt@ames.arpa, ...@uunet.uu.net USNAIL: Coherent Thought Inc. 3350 West Bayshore #205 Palo Alto CA 94303