Path: utzoo!mnetor!uunet!husc6!cmcl2!vx2!spector
From: spector@vx2.GBA.NYU.EDU (David HM Spector)
Newsgroups: comp.sys.mac
Subject: Re: Virus killer
Message-ID: <650013@vx2.GBA.NYU.EDU>
Date: 17 Mar 88 01:59:00 GMT
References: <238@faui10.UUCP>
Organization: New York University
Lines: 25

I assume Mr. Urlichs meant that his new INIT will install a resource
("nVIR", ID=10) that will watch for the original virus (via an OS trap)
and remove it..

...this _appears_ to be what the main part of the INIT does... I haven't tried 
it though, as I don't really want to (re)infect my system [I just finished 
with the lysol after March 2nd :-(] to try it out.  But it certainly
doesn't look like its gernating viruses..  [if all this sounds vague..it is..
'cause 1) I am reading assembly output from MPW's dumpcode tool and 2) I'm
too spaced fom prgramming all night to analyze every byte of it..  :-) ]

But it looks kool to me...
			cheers,

			 David 


-------------------------------------------------------------------------------
David HM Spector				New York University
Senior Systems Programmer			Graduate School of Business
Arpa: SPECTOR@GBA.NYU.EDU			Academic Computing Center
UUCP:...!{allegra,rocky,harvard}!cmcl2!spector	90 Trinity Place, Rm C-4
MCIMail: DSpector				New York, New York 10006
AppleLink: D1161     CompuServe: 71260,1410     (212) 285-6080
"SJM 25, 'real nice guy' seeks SJF...  What? This ISN'T The Voice personals?!"