Path: utzoo!utgpu!utstat!jarvis.csri.toronto.edu!rutgers!apple!bionet!csd4.milw.wisc.edu!lll-winken!indri!polyslo!vlsi3b15!vax1.cc.lehigh.edu!ubu.cc.lehigh.edu!virus-l
From: milne@ICS.UCI.EDU (Alastair Milne)
Newsgroups: comp.virus
Subject: Re: nVirB infection at teesside poly, uk (Mac)
Message-ID: <0004.8906051718.AA01402@ubu.CC.Lehigh.EDU>
Date: 4 Jun 89 07:15:26 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Reply-To: VIRUS-L@IBM1.CC.Lehigh.EDU
Lines: 11
Approved: virus-l@ubu.cc.lehigh.edu

Though this is probably old news, I'd recommend adding GateKeeper to
your INITs.  Though it's absolutely transparent for all disc writes
you tell it to allow, it forbids completely any writes it doesn't know
to be authorised.  As soon as I discovered how effective it is, I
removed Vaccine from my system: GateKeeper is much more thorough (as
it checks the writing of *any* resource, not just CODE) and much less
intrusive.

Best of luck with your disinfection.

Alastair Milne