Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!wuarchive!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: gford%nunki.usc.edu@usc.edu (Greg Ford) Newsgroups: comp.virus Subject: WDEF virus.... (Mac) Message-ID: <0004.8912191224.AA01435@ge.sei.cmu.edu> Date: 19 Dec 89 01:04:18 GMT Sender: Virus Discussion List Lines: 30 Approved: krvw@sei.cmu.edu Sure enough, my Mac II had WDEF on it. It's first attack (on four partitions) was December 9. Funny thing was, immediately prior to my discovery of this virus, my Mac II had been experiencing these same symptoms of slow-closing windows. In fact, it was common for the mouse-depression lines in the go-away box of the window to take up to 5 seconds to appear and for the window to close. This follows what has been said about the virus earlier. The other problem I had (which has now gone away since erradication 5 days ago) was that when opening a large file from the HD (Rodime, 140 Meg, Internal), it would often crash during the read, and MacBugs would say it was damaged. This scared me because I haven't done a backup since September (I know, I know no flames please), and this crash was coupled with the sound that the HD makes when it starts up (you Rodime people know what I mean - that click, and spinning sound). Anyway, the problem has gone away, and those same files open fine now that WDEF is gone. Anyone else had this problem? As a side note, every single Mac on campus is infected near as I can tell. One lab with ~80 macs was infected in all 10 macs I randomly sampled. I gave the lab-room operator a copy of Disinfectant 1.5, but he (get this) was unsure what to do with it. I hope they've cleaned it up. If this thing (WDEF) passes from disk to disk just by inserting an infected disk into a mac, can you imagine the headache created by users who have they're own disks? The whole lab can become reinfected in one day. What a mess. ******************************************************************************* * Greg Ford GEnie: G.FORD3 * * University of Southern California Internet: gford%nunki.usc.edu@usc.edu * *******************************************************************************