Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!bloom-beacon!bu-cs!dartvax!eleazar.dartmouth.edu!jalden
From: jalden@eleazar.dartmouth.edu (Joshua M. Alden)
Newsgroups: comp.sys.mac
Subject: Virus Detective - What string to detect Scores infected Finder?
Message-ID: <13006@dartvax.Dartmouth.EDU>
Date: 11 Apr 89 20:53:43 GMT
Sender: news@dartvax.Dartmouth.EDU
Reply-To: jalden@eleazar.dartmouth.edu (Joshua M. Alden)
Organization: Dartmouth College, Hanover, NH
Lines: 28

Hello.

    A short time ago, I posted asking if anyone could tell me search
strings to detect Scores in System files.  The strings below were very
helpful, but they did not produce a detection in a Finder that I know
to be infected.  (They did detect it in the System, Desktop and Scores
files.)

    Does anyone know what string would detect Scores in the FINDER?

---
  The following search strings should be added to Virus Detective
  to find Scores infected systems:
        INIT Dual 6 772
        INIT Dual 10 1020
        INIT Dual 17 480
        atpl Dual 128 2410
        DATA Dual -4001 7026
  I got these from the configuration resource of RWatcher.

  Z. Fiedorowicz
---

    Thanks in advance.


                                          -Josh Alden
                                            Joshua.Alden@dartmouth.edu