Path: utzoo!attcan!uunet!lll-winken!ames!mailrus!cornell!vax5!pv9y
From: pv9y@vax5.CIT.CORNELL.EDU
Newsgroups: comp.sys.mac
Subject: Re: Save me from nVIR !!!
Message-ID: <17678@vax5.CIT.CORNELL.EDU>
Date: 11 Jan 89 05:47:26 GMT
References: <141200001@cdp> <544NETOPRRW@NCSUVM>
Sender: news@vax5.CIT.CORNELL.EDU
Reply-To: pv9y@vax5.cit.cornell.edu (PUT YOUR NAME HERE)
Organization: Cornell Information Technologies, Ithaca NY
Lines: 28

In article <544NETOPRRW@NCSUVM> NETOPRRW@NCSUVM.BITNET (Rich Wood) writes:
>
>    Hello,
>          I too hate this of all viruses because of it's ease at moving around.
>    Here's some info that I hope helps.  First of all you should get yourself
>    some type of detection program (ie. virus detective, interferon, etc).
>    After locating which pieces of software are infected, throw them in the
>    trash can and empty the trash.  I know this sounds very bad if you have
>    no back up's, but I have yet to see anything which can save infected
>    applications.  Don't try to replace anything until you are sure the entire
>    disk is clean.  While nvr is bad it doesn't seem to be able to remain after
>    being trashed.  Also first check your system folder.  It tends to attach
>    itself to the system and finder first.  Also the programs mentioned above
>    are public domain if you need to find them.
>                                      Hope this helps

As far as applications that can help clean up infected programs, Vaccination,
AntiPan, Repair (recently posted to the binaries group), and ResEdit (if you
can find nVIR resources easily) can all remove tthe virus. Obviously,
reverting to backup is best, but that's not always an option.  Your System is
almost certainly infected too, so make sure to replace it as well.  In general,
replace anything you can easily and repair anything you can't.  Make and keep
backups and keep a close eye on the programs you repair to make sure that they
weren't damaged by the repair process.  Also check your disks at regular 
intervals with Interferon to make sure that the virus hasn't crept back on.


Adam