Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: adamg@world.std.com (Adam M Gaffin) Newsgroups: comp.virus Subject: Reporter seeks help on story about a Mac virus (Mac) Message-ID: <0004.9102081416.AA29807@ubu.cert.sei.cmu.edu> Date: 6 Feb 91 18:23:10 GMT Sender: Virus Discussion List Lines: 40 Approved: krvw@sei.cmu.edu Hi, all! I'm a reporter at the Middlesex News in Framingham, Mass. The new governor here had some trouble getting his budget to the Legislature this week, allegedly because of a virus, and I'd be most grateful if somebody could help me out with a story. Seems one of his aides was up late finishing the budget on his Mac II (as in 3 a.m.) for delivery to the Legislature that morning. He had just typed about 50 (!) pages of the document in MacWrite, when it refused to save the document. He eventually was able to retrieve an early version of the document, which he had filed under a different name, but those 50 pages were gone. When he ran Interferon 3.1 he got this messages: "Virus Type 003 on the TOPS network." The computer had been part of LAN in the Office of Administration and Finance but was taken off and moved to his office so he could work on the document (the governor's office actually uses an old Wang system, but since the guy was new and time was short, he figured he'd work with what he already knew). The office is now busy checking all the other computers, of course, and the aide in question has been told to save his documents more often! So, does anybody know what kind of virus this might be and how common it is? And is it true that Mac viruses are easier to write than PC ones (one of our PC people told me that; maybe she's biased :-) ). And, in the Dumb Question of the Week category: how might the virus have gotten into the network in the first place? I assume it would be somebody bringing an infected disk in from home (the LAN is not tied to any other network), but might there be other ways (short of the Dukakoids sabotaging the system, which I doubt, given they had no idea it was going to be used to write the budget, since they did all that on their Wangs). Any help would be most appreciated! Thanks! Adam Gaffin Middlesex News, Framingham, MA adamg@world.std.com Voice: (508) 626-3968 Fred the Middlesex News Computer: (508) 872-8461