Path: utzoo!mnetor!uunet!lll-winken!lll-tis!ames!ucsd!sdcsvax!net1!borton
From: borton@net1.ucsd.edu (Chris Borton)
Newsgroups: comp.sys.mac
Subject: Re: Virus killer
Message-ID: <4767@sdcsvax.UCSD.EDU>
Date: 16 Mar 88 23:01:04 GMT
References: <238@faui10.UUCPg
Sender: nobody@sdcsvax.UCSD.EDU
Reply-To: borton@net1.UUCP (Chris Borton)
Organization: UCSD Network Operations Group
Lines: 22
Keywords: virus nvir

In article <238@faui10.UUCP> msurlich@faui10.UUCP (Matthias Urlichs) writes:
>Place this short INIT into your active System folder and reboot.
>From now on, the virus will be removed automatically from every program
>you start.
>Your System will also be virus-free. The INIT installs a "nVIR" 10 resource
>in the System to prevent the virus from doing anything.
>(This is a feature the virus author has thoughtfully put in - didn't want to
>get problems with his own Mac, I suppose.)

I'm glad David Spector checked out this INIT and verified it.  What I find
funny, though, is that the nVIR we have has NO call to GetResource() or
ChangedResource() for nVIR with ID 10.  I told Mike about the nVIR 10 and
he told me later that he couldn't find any such call in there (luckily he
has time to follow these things, being a real person now, versus me studying
for finals :-)).

More curiosities...

-cbb
Chris "Johann" Borton, UC San Diego	...!sdcsvax!borton
					borton@ucsd.edu or BORTON@UCSD.BITNET
Letztes Jahr in Deutschland, nog een jaar hier, en dan naar Amsterdam!
"H = F cubed.  Happiness = Food, Fun, & Friends."  --Steve Wozniak