Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uwm.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: jalden@eleazar.dartmouth.edu (Joshua M. Alden)
Newsgroups: comp.virus
Subject: Re: WDEF-A Response (Mac)
Message-ID: <0002.9012101454.AA21256@ubu.cert.sei.cmu.edu>
Date: 7 Dec 90 20:34:19 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 29
Approved: krvw@sei.cmu.edu

asqe-y-v-ssi@stuttgart-emh1.army.mil (Dale Jones) writes:
>Please be careful with your very broad statement of "You can get rid
>of virus by rebuilding the Desktop on your
>hard disk (which is where it resides)."
>
>Dale Jones
>Chief, Information Center, 589th Signal Company
>Stuttgart Germany

    I think the problem here is that you must re-build the Desktop and
then make sure the virus is not active in memory.  To do that, simply
re-start.  You CAN get rid of WDEF by re-building the Desktop; we do
it here all the time.  But WDEF is a persnickity little thing, and it
spreads quickly back to your hard drive from any floppies you have
that still have it, and from anyone else's infected floppy, all at the
insertion of the disk.

    We recommend GateKeeper Aid to our users.  It completely removes
WDEF whenever it sees it; no action on the part of the user is
necessary.  So you throw GateKeeper Aid in your System folder, re-boot,
and insert all your floppies once, and you know you haven't got WDEF,
and that you can't get it again as long as you've got GateKeeper Aid.

- -Josh Alden, Virus Consultant, User Services, Dartmouth College.
- --
 /--------------------------------------------------+-------------------------\
 |Josh Alden, Consultant, Kiewit Computation Center | HB 48, Dartmouth College|
 |   Private mail: Joshua.Alden@dartmouth.edu       | Hanover, NH     03755   |
 |    Virus mail:   Virus.Info@dartmouth.edu        |      (802) 295-9073     |