Path: utzoo!attcan!uunet!lll-winken!lll-lcc!ames!pasteur!agate!saturn!ucscc.UCSC.EDU!fiatlux
From: fiatlux@ucscc.UCSC.EDU (David Vangerov)
Newsgroups: comp.sys.mac
Subject: The return of the SCORES virus (we got bit by it)
Keywords: need info about it, how it works, etc
Message-ID: <4423@saturn.ucsc.edu>
Date: 6 Aug 88 10:32:52 GMT
Sender: usenet@saturn.ucsc.edu
Reply-To: fiatlux@ucscc.UCSC.EDU (David Vangerov)
Organization: Apathetic Surf Club (we don't surf and we don't care)
Lines: 46


Much to my dismay, I found this nasty virus lurking around on our
2 Mac SE's and the Mac II in the lab I work. I don't know how it 
got on there, and that's not the point of the article. I first tried
using ResEdit to get rid of it, and that didn't work. Then I
tried using the DA Virus Detective which successfully indentified
that there was mysterious CODE resources lurking around in a lot
of the well used programs on the hard-drives. However, Virus
Detective managed to break the programs I was trying to disinfect. 
(including the system to one extent and completely trashing the
finder) Not exactly what I had in mind. 

But wait! I remembered that someone had dissected the virus and
posted their findings from it. They also managed to come up with
a utility that will eradicate the SCORES virus from your
hard-disk. So I quickly ftp'd over to sumex-aim (our Internet
link just happened to be up), grabbed the KillScores program and
a little while later I was a happy camper since I had managed to
get rib of this nasty little virus. 

So I'd like to thank the authors of that program for a job well
done. It managed to wipe out the virus without wiping out the
infected files/programs. However, I have a request. It's been
asked that I do a small writeup for our computer center
newsletter outlining what the virus is and what I did to get rid
of it and what precautions to take against being infected by it
(or other viruses). So what I need is the orginal postings by the
author(s) of KillScores. These were the postings that outlined
what the virus was, how it works, etc and how to get rid of it 
using ResEdit (this was before the KillScores program was
posted). 

So I need the info on the SCORES virus for the article. I'm not
sure about a few points and would like to double check my facts
before I make a fool of myself in the newsletter. Of course our
machine retires articles after 2 weeks, so it's no use looking
there. I'd really appreciate this and of course the authors would
be quoted and acknowledged. 

Thanks a bunch (both for the info and the KillScores program)...


+----------------------------------------------------------------------------+
|		     	        David Vangerov				     | 
|    Just your average Theater Arts major with a weird thing for computers   |
| fiatlux@ucscc.BITNET || fiatlux@ucscc.ucsc.EDU || ...!ucbvax!ucscc!fiatlux | 
+----------------------------------------------------------------------------+