Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!samsung!munnari.oz.au!metro!wolfen!wraith!u8530671
From: u8530671@cs.uow.edu.au (Mark 'Scunge' Wann)
Newsgroups: comp.sys.apple2
Subject: Virus on the GS?
Keywords: Virus GS WriteIt?
Message-ID: <923@wraith.cs.uow.edu.au>
Date: 14 Jun 90 06:50:37 GMT
Organization: Yak Enterprises
Lines: 35


	G'day. The following is being posted on behalf of a friend of 
mine (Brian) who is probably having trouble with viruses and wants to
know if there's a known problem with any of the software he was using
or if anyone can recommend any good virus programs for the GS. It'd be 
best if any replies were posted to the net rather than e-mailed to
me, because I don't know if the mail'd make it to me okay.

	The story so far: Brian has a GS (v3.0 ROMs) with one (?) disk
drive, 1.1 meg main memory and a 1 meg memory expansion card. Recently,
he grabbed a heap of problic domain and shareware programs and proceeded
to check them out. I believe that he was running most of his programs from
a 1 meg RAM disk he set up. He started up InstallDA to load some NDAs and
CDAs into memory. He played with them a bit, he used some utility programs
and somewhere along the line, there was a system crash and the RAM disk
went bye-byes.

	So, he reboots the machine and put stuff back on his RAM disk. On a
hunch, he also checked out what Vaccine had to say about his files and 
according to the .VAC files, things kept changing (particularly the first
file on the disk in alphabetical order), regardless of whether or not the
files were actually being used by any program he knew he was using.

	Now, the tricky bit: he decided to check out some more NDAs and 
got into WriteIt (I don't know which version) and instead of the expected 
window got a dialog box with a single button (labelled "Die!"). Having no
disks in his drives to corrupt, he hit the button and after a little while
was thrown into the monitor.

	So, for the moment, he's only using disks which he's sort of sure
mightn't be infected (much). You can see his problem, yes? My thanks in
advance for any ideas, recommendations and anecdotes you might have.

				Mark "Scunge" Wann
				u8530671@wraith.cs.uow.oz (or something)