Path: utzoo!attcan!uunet!jarthur!usc!sdd.hp.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: azavatone@ldbvax.dnet.lotus.com Newsgroups: comp.virus Subject: Mac Anomolies with AppleShare & Ethernet (Mac) Message-ID: <0012.9009191742.AA13188@ubu.cert.sei.cmu.edu> Date: 19 Sep 90 16:55:27 GMT Sender: Virus Discussion List Lines: 45 Approved: krvw@sei.cmu.edu Food for thought. I would LOVE to find out if anyone else has come across this problem. Occasionally, (3 times in the past 5 months) I have noticed that AppleShare will not load (hang in fact) when I boot my machine. Often, about 10 other people have this problem. Fixing it is a pain. If I disable AppleShare with init 2.0, the machine boots and loads in its 40 billion inits and everything else works well, inculding QuickMail. Therefore, I assume that it is an AppleShare problem, not a network/ethertalk one. So I reinstall AppleShare 2.0.1. Same problem, AppleShare hangs on startup. So, I reinstall the network software (ethertalk 2.0.1 and 1.2 - we only use 1.2) by installing 2.0.1 and dragging the previous version 1.2 into the system folder. Restart. SAME PROBLEM!! So, I remove AppleSare, AppleShare Prep and Network. In the following order, I install AppleShare from the AppleShare workstation Install disk (running 6.0.5 so it will boot our machines) - Ethertalk 2.0.1 from the ethernet installation disk (I made a 6.0.5 installer from the standard installation disk) - then drag the pervious version (1.2) from the same disk into the system. Reboot. Use Init 2.0 to make sure AppleShare is not disabled. Go to network from the control panel and select the version of ethertalk we currently use and VIOLA! IT WORKS! But why? I have NO clue. This is reproducable, in fact I am going to reproduce it at least 4 more times today to get the rest of our machines up again. The funny thing is that only about 10 of our 100+ machines got nuked. They were mac II's, cx's, ci's Fx's and one Se. My hypothesis is that someone is sending out packets to our Fastpath and they are hitting other macs running AppleShare. One of our employees got hit around 3pm on tuesday, I got hit between 6 and 7pm tuesday. Is this rouge ethernet board behavior or am I just doomed to suffer working on Macs in a predominantly IBM company? We may never know. Any Ideas/insights are welcome, but I would prefer a solution.B-] If it is an AppleShare virus let's name it after me ok? B-[ mail 2 me or the list at Azavatone@ldbvax.dnet.lotus.com" Alex "Zav" Zavatone Mac Wizard in Training 123 Mac dev team - Lotus Zav B!-> ps: HELP! My brain is fried!