Xref: utzoo comp.sys.mac.misc:3161 comp.sys.mac.system:1472 comp.sys.mac.wanted:993
Path: utzoo!utgpu!watserv1!watmath!att!occrsh!uokmax!apple!usc!zaphod.mps.ohio-state.edu!uwm.edu!ogicse!milton!raven.phys.washington.edu!owen
From: owen@raven.phys.washington.edu (Russell Owen)
Newsgroups: comp.sys.mac.misc,comp.sys.mac.system,comp.sys.mac.wanted
Subject: Re: Virus help needed -- URGENT
Message-ID: <7351@milton.u.washington.edu>
Date: 11 Sep 90 17:22:12 GMT
References: <1990Sep7.062926.23448@noao.edu>
Sender: news@milton.u.washington.edu
Organization: University of Washington
Lines: 31

Get Disinfectant. It will tell you which files are infected, and possibly 
even remove the infection, though it is best not to rely on this.

Disinfectant is free via anonymous ftp from various sources. 
stanford-aim.stanford.edu ought to have a copy. If it doesn't and you have 
any trouble finding it, let me know.

My suggestion for how to use Disinfectant:
1) get Disinfectant
2) run it and select "install protection INIT"
3) reboot (at this point viruses cannot spread on your Mac)
4) run Disinfectant again and SCAN your disk to find out which files are 
infected.

To fix an infected file, I suggest the following, in order:
- if you have a backup, replace the infected file
- if you don't have a backup, and it's a document (data file), try opening 
the file in the application which created it and saving a new copy (with 
Save As...). Use Disinfectant
to scan the new copy to be sure it's virus-free, and if it is, delete the 
old copy.
- if all else fails, let Disinfectant try to remove the virus from the 
file. But remember this may corrupt the file.

Good luck.

Russell Owen
owen@raven.phys.washington.edu
Astronomy Dept. FM-20
University of Washington
Seattle, WA  98195