Path: utzoo!attcan!uunet!tank!mimsy!dftsrv!ames!oliveb!felix!kehr
From: kehr@felix.UUCP (Shirley Kehr)
Newsgroups: comp.sys.mac
Subject: Re: Transfers and Viruses
Keywords: virus transfer
Message-ID: <71341@felix.UUCP>
Date: 23 Nov 88 15:48:50 GMT
References: <76699@sun.uucp> <206@internal.Apple.COM> <6127@netnews.upenn.edu> <219@internal.Apple.COM> <577@poseidon.ATT.COM> <17975@shemp.CS.UCLA.EDU> <17991@shemp.CS.UCLA.EDU> <17119@agate.BERKELEY.EDU> <1006@ccnysci.UUCP> <479@dbase.UUCP>
Sender: daemon@felix.UUCP
Reply-To: kehr@felix.UUCP (Shirley Kehr)
Distribution: comp.sys.mac
Organization: FileNet Corp., Costa Mesa, CA
Lines: 12

In article <479@dbase.UUCP> cy@dbase.UUCP (Cy Shuster) writes:
 
<Unfortunately, we discovered nVIR in CMS's disk formatting software recently
<as well. Not only is a locked disk from a vendor the last place you'd think
<to look, but in cleaning up after a virus many people go back to format their
<disk! It's easy to spot, though: ResEdit will show the nVIR resource if their
<program is infected. And, it did no damage that we can see: it looks like it
<was designed to call Macintalk and say "Don't Panic" every 1,000th invocation.
  
What happens if you don't have Macintalk?

Shirley Kehr