Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!elroy.jpl.nasa.gov!usc!julius.cs.uiuc.edu!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: SUEHAY@BROWNVM.BITNET (Sue Hay (tm))
Newsgroups: comp.virus
Subject: Re: Is this a MAC virus attack? (Mac)
Message-ID: <0001.9011191418.AA28547@ubu.cert.sei.cmu.edu>
Date: 15 Nov 90 21:40:45 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 30
Approved: krvw@sei.cmu.edu

David Platt posted to the VIRUS-L Digest:

>Date:    09 Nov 90 19:37:35 +0000
>From:    coherent!dplatt@ames.arc.nasa.gov (Dave Platt)
>...
>It's known that the WDEF virus is capable of causing crashes which
>corrupt disk data structures... I've encountered disks which were
>rendered entirely unmountable as a result of WDEF-induced crashes.  If
>the Disinfectant INIT had only recently been installed on the SE/30,
>it's possible that previous infections might have caused some damage
>to the directories, and that only now has the damage propagated enough
>to cause visible symptoms.

I asked John Norstad, author of Disinfectant, to confirm or refute
this, and here is his reply:

>Yes, it's possible, but it doesn't seem to happen very often.

I'm posting his answer because I thought that people might be
interested in seeing it confirmed by him.

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* Susan E. Hay                                                          *
* User Services Specialist/Apple Support Coordinator                    *
*                                                                       *
* Computing & Information Services   phone: 401-863-7302                *
* Brown University                   internet: suehay@brownvm.brown.edu *
* Box 1885, 115 Waterman Street      bitnet: suehay@brownvm             *
* Providence, RI  02912              applelink: suehay                  *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *