Path: utzoo!mnetor!uunet!lll-winken!lll-lcc!lll-tis!ames!ucsd!sdcc6!sdacs!wade
From: wade@sdacs.ucsd.EDU (Wade Blomgren)
Newsgroups: comp.sys.mac
Subject: nVIR virus - you may think you don't have it...
Message-ID: <502@sdacs.ucsd.EDU>
Date: 19 Mar 88 01:49:13 GMT
Organization: UCSD Academic Computing Services
Lines: 19

An interesting thing...for some reason (I don't think it is related to
the virus), when opening a System File with ResEdit while booted from
that same system, a large number of resources INCLUDING 'nVIR'
don't show up in the ResEdit resource list. Even stranger is the fact
that although a certain number of INIT's show up, the INIT 32 from
the virus does not show up.  It is only when booted from another disk 
that I can see the virus related resources (as well as a number of 
other resources) in that system file. Does anybody know why this is?

Anyway, check again from a separate boot disk - you may have the virus.  
I thought I was fine, but upon closer examination I found I was quite 
seriously affected.

Also, note that the nVIR virus does seem to infect the Finder, the
DA Handler, as well as normal (APPL type) applications. I don't know 
what the significance of this is as far as its ability to reproduce..


Wade Blomgren
wade@sdacs.ucsd.edu  or ..ucsd!sdacs!wade