Article View: comp.sys.mac
Article #40694Virus Detective - What string to detect Scores infected Finder?
From: Joshua M. Alden
Date: Tue, 11 Apr 1989 20:53
Date: Tue, 11 Apr 1989 20:53
28 lines
1373 bytes
1373 bytes
Hello.
A short time ago, I posted asking if anyone could tell me search
strings to detect Scores in System files. The strings below were very
helpful, but they did not produce a detection in a Finder that I know
to be infected. (They did detect it in the System, Desktop and Scores
files.)
Does anyone know what string would detect Scores in the FINDER?
---
The following search strings should be added to Virus Detective
to find Scores infected systems:
INIT Dual 6 772
INIT Dual 10 1020
INIT Dual 17 480
atpl Dual 128 2410
DATA Dual -4001 7026
I got these from the configuration resource of RWatcher.
Z. Fiedorowicz
---
Thanks in advance.
-Josh Alden
Joshua.Alden@dartmouth.edu
Technical Details
Message-ID:
<13006@dartvax.Dartmouth.EDU>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!bloom-beacon!bu-cs!dartvax!eleazar.dartmouth.edu!jaldenShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!bloom-beacon!bu-cs!dartvax!eleazar.dartmouth.edu!jalden From: jalden@eleazar.dartmouth.edu (Joshua M. Alden) Newsgroups: comp.sys.mac Subject: Virus Detective - What string to detect Scores infected Finder? Message-ID: <13006@dartvax.Dartmouth.EDU> Date: 11 Apr 89 20:53:43 GMT Sender: news@dartvax.Dartmouth.EDU Reply-To: jalden@eleazar.dartmouth.edu (Joshua M. Alden) Organization: Dartmouth College, Hanover, NH Lines: 28