Path: utzoo!attcan!uunet!samsung!usc!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: barnett@unclejack.crd.ge.com (Bruce Barnett)
Newsgroups: comp.virus
Subject: Virus on Startup Screen? (MAC)
Message-ID: <0008.9006291346.AA11905@ubu.cert.sei.cmu.edu>
Date: 28 Jun 90 20:48:11 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1.BITNET>
Lines: 33
Approved: krvw@sei.cmu.edu

We have been having problems with MacIIci and Microsoft mail.
I suspect a new type of virus.

The Mac crashes when clicking "SETUP" in the chooser when selecting
	a mail server.
The Mac also crashes when opening the Microsoft Mail DA.

I have replaced the entire system folder, and re-installed TOPS, etc.

If I put back the start-up screen in the system folder, Microsoft
Mail crashes. (System error 12, or the screen freezes.)
When I move the start-up screen to a new place and
restart the Mac, everything works fine.

This is repeatable. The start-up screen seems to be infected.

This problem has happened on several new Mac's (all MacIIci's)
in far ends of the building.  OS 6.0.4 and 6.0.5.
But not every MacIIci crashes.

I haven't narrowed it down to an exact combination of what must be
replaced when this crash occurs. But replacing (not updating) the
system, re-installing TOP and Microsoft mail, and deleting the
start-up screen seem like the best solution we have right now.

This corrupted "system" problem has been ten times harder to fix
than any virus we have seen. We use SAM 2.0 and Disinfectant 1.8, and
they find nothing wrong with the startup screen.

Can the startup screen contain a virus?

- --
Bruce G. Barnett	barnett@crd.ge.com	uunet!crdgw1!barnett