Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!cs.utexas.edu!sun-barr!lll-winken!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: LEAVITDG@splava.cc.plattsburgh.edu Newsgroups: comp.virus Subject: mac virus question from amateur radio packet (PC) Message-ID: <0003.9104231715.AA16173@ubu.cert.sei.cmu.edu> Date: 20 Apr 91 12:34:00 GMT Sender: Virus Discussion List Lines: 48 Approved: krvw@sei.cmu.edu >------------------------------msg------------------------------------ >Date: 19 Apr 91 12:49:35 EDT (Fri) >From: ka2bqe@ka2bqe.#nwvt.vt.usa.na (Brian Riley) >Subject: Re: WDEF > > Darryl please send this back out to BITNET in response to the WDEF commentary >-------- > > That WDEF A is 'mostly benign' is questionable. I recently had a query >made to the network about an infestation of nVIR B. Upon recommendation, I >obtained Disinfectant 2.4 and went to work cleaning house in the corporate >tower at the Village of Smuggler's Notch Resort where I do some part time >computer work. Of some 14 machines I scanned and cleaned, every one was >infected with a nVIR B that came to us attached to a copy of Stuffit 1.5.1. >Moreover every single HD desktop was infected with WDEF A. 85% of the >floppies were infected. Most machines were SE's or Plus's and a few >Classics, no II's. All system were complaining of 'minor annoyances'; >premature program terminations, a number of the Plus's had Europa 20 >external HD's and all of them were 50-50 whether or not they would boot >from HD. There were anumber of other complaints that are hard to >categorize. ALL complaints stopped upon removal of WDEF A! I installed the >Protection INIT and everything has run smooth for several days with 0 >complaints. > > I am sort of new to Macs (I have 8 years on PCs!) and its brand of virii, >but this experience would have to make me think that, while not maliciously >catastrophic, WDEF A is far from 'mostly benign!' > > Interesting sidelight on Disinfectant. You cannot sucessfully install the >INIT on a system that was infected but was cleaned. You must re-boot first. >I could not find mention of this in the docs, but it is quite verfiable - I >had almost 20 chances to check it out! > > *--------------------------------------------*-----------------------------* > | 73 de brian @ WULFDEN on Hawk's Mountain | Since when does winning a | > |--------------------------------------------| war have anything at all to | > | us snail: Box 188, Underhill Ctr, VT 05490 | do with its being right? | > *--------------------------------------------*-----------------------------* >----- End of message 5622 from KA2BQE @ KA2BQE.#NWVT.VT.USA.NA ----- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Darrell G. Leavitt SUNY Empire State College (ESC) ESC VAX: DLEAVITT 403 Sibley Hall SUNYNET: SESCVA::DLEAVITT Plattsburgh, New York, 12901 INTERNET: LEAVITDG@SPLAVA.CC.PLATTSBURGH.EDU PHONE : (518) 564-2837 AMATEUR BitNet : LEAVITDG@SNYPLAVA PACKET: N2IXL @ KD2AJ.NY.USA.NA ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~