Path: utzoo!utgpu!watmath!clyde!att!rutgers!gatech!ncar!tank!nucsrl!accuvax.nwu.edu!jln
From: jln@accuvax.nwu.edu (John Norstad)
Newsgroups: comp.sys.mac
Subject: Re: Re: The NEW nVIR (just the facts, ma'am)
Message-ID: <10330109@accuvax.nwu.edu>
Date: 4 Jan 89 17:56:38 GMT
References: <1116@ccnysci.UUCP>
Organization: Northwestern U, Evanston IL, USA
Lines: 21


Thanks for volunteering my time, Alexis :-)

Actually, I just got a copy of Hpat last week, and I've already compared
it to what I call nVIR B.  It is indeed a very simple clone of nVIR B.

Bob Murrow's original posting was accurate, except for a few typos.  As
Alexis pointed out, the INIT 32 resource lives on an infected system
file, not an infected application file.  Also, the Hpat 0 resource has
size 2, not size 0.

So the only differences between Hpat and nVIR B are that Hpat uses the
resource type Hpat instead of nVIR, and it uses CODE id 255 instead of 
256.

John Norstad
Academic Computing and Network Services
Northwestern University

Bitnet:    jln@nuacc
Internet:  jln@acns.nwu.edu