Path: utzoo!attcan!uunet!ndsuvax!nubode From: nubode@ndsuvax.UUCP (Spyro Gyra) Newsgroups: comp.sys.apple Subject: Re: Viruses Message-ID: <1090@ndsuvax.UUCP> Date: 5 Aug 88 05:15:21 GMT Reply-To: nubode@ndsuvax.UUCP (Spyro Gyra) Organization: The_Vortex:AlterNet Server Lines: 16 One of the most devious virus attempts I have seen is a 'virus eliminator' that supposedly looked for CyberAIDS (supposedly written by Tom E. Hawk) in SYS files and 'destroyed' it. Well, a friend and I tried it on a backup copy of ProTERM which we obviously knew was NOT contaminated. When the program came up with a 'this disk is contaminated, file PRODOS has been cured' or something to that effect, we became curious. The program itself installed CyberAIDS in the PRODOS file. Quite nasty, eh? I suggest writing thy own virus debuggers! Clint Fleckenstein ("SpyroGyra") NU132271@NDSUVM1.BITNET nubode@plains.nodak.edu nubode@NDSUVAX.BITNET 45% of all statistics are made up.