Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!uwm.edu!mrsvr.UUCP!pet16.uucp!hallett
From: hallett@pet16.uucp (Jeff Hallett x5163	)
Newsgroups: comp.sys.mac
Subject: Re: WDEF & Gatekeeper
Message-ID: <1729@mrsvr.UUCP>
Date: 14 Dec 89 15:43:07 GMT
References: <3277@hub.UUCP> <1501@rodan.acs.syr.edu> <4221@sbcs.sunysb.edu> <22311@ut-emx.UUCP>
Sender: news@mrsvr.UUCP
Reply-To: hallett@gemed.ge.com (Jeffrey A. Hallett (414) 548-5163)
Organization: GE Medical Systems, Milwaukee,  WI
Lines: 20

In article <22311@ut-emx.UUCP> chrisj@emx.UUCP (Chris Johnson) writes:
>WDEF goes to considerable lengths to bypass all anti-virus systems.  (Vaccine
>wouldn't have caught it anyway.)  I won't go into any details here, but I
>will say that the techniques it used are exactly what causes it to crash all
>Mac IIcis (which is how it was originally discovered) and many IIcxs.


Just one question.  Obviously, someone worked  really hard to get this
thing to propagate.  Other than the  IIci  crashes  and the feeling of
being raped, does this  virus do anything  else?  Since it  is a WDEF,
does it change some window definition on some date?

Just curious.


--
	     Jeffrey A. Hallett, PET Software Engineering
      GE Medical Systems, W641, PO Box 414, Milwaukee, WI  53201
	    (414) 548-5163 : EMAIL -  hallett@gemed.ge.com
		  Est natura hominum novitatis avida