Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!ames!amdcad!sun!pitstop!sundc!seismo!uunet!munnari!murdu!ucsvc!mvax!lgeorge
From: lgeorge@melbcae.edu.au
Newsgroups: comp.sys.mac
Subject: Virus info given and wanted..
Message-ID: <256@melbcae.edu.au>
Date: 31 Jan 89 09:54:44 GMT
Organization: La Trobe University - Lincoln School of Health Sciences
Lines: 43

Hi.
We have just had our first run in with a virus, in particular nVIR strain B.
My thanks to the NET for all the wonderful advice and software used to 
eradicate the virus.
Now that we have had some experience with a virus, I took some time to test out 
all the software that we received from the NET, and here are some of my 
finding...
The one big dissapointment is that Vaccine 1.0.1 _STILL_ bombed when it ran an 
infected problem, and I _thought_ that was one of the fixes to Vaccine 1.0.
RWatcher is **MARVELOUS**, as it was this that caught the virus and brought it 
to our attention, but I do have just one problem with RWatcher.  One of the 
entries in the RLIS resource insists on being of type INIT, and it cannot be 
cleared, so on some of my RLISs entries [I keep one for each virus type] have 
unused resource slots, simply because that type of virus doesn't have an INIT 
resource associated with it, like INIT29 for example.  Not sure if this has 
been fixed, but nobody else has mentioned it.
Another small problem with RWatcher is that empty resource slots in the RLIS 
resources trigger a virus warning when you try and copy Virus Rx, since it 
contains a resource of type '    ', which would match with an empty slot.

A viral INIT that I have, but has not been mentioned is one called Viral Arm.
I haven't _actually_ purchased it, so I don't want to get myself into ANY 
trouble.
Name : Viral Arm 9.0
(c)  : 1988 Burrada

It 'feels' A LOT like Vaccine, and in fact has the same bomb problem as 
Vaccine.  It has a different icon, and when I brought Vaccine 1.0.1 to my mac 
it took on that icon.  It came to me at about 90k, but I found an 80k snd 
resource init, and taking it out brought it back to about 9k.

Ta.

George Stamatopoulos
La Trobe University - Lincoln School of Health Sciences
Melbourne
Victoria
Australia

PS. does anyone have info/programs for removing Hpat and/or INIT29, just in 
case they are approaching on the horizon.  I suppose you could rename and 
renumber all the Hpat resources back to their nVIR equivalents and then run 
Antipan, but life is too short.