Article View: comp.sys.mac
Article #43953WDEF and Desktop Manager (was Re: WDEF virus: Am I immune?)
From: Brian Kendig
Date: Fri, 15 Dec 1989 18:37
Date: Fri, 15 Dec 1989 18:37
31 lines
2153 bytes
2153 bytes
I have the Desktop Manager running on my 2.5Mb Mac SE, and I ran a few
tests with it and the WDEF virus.
The DeskTop Manager uses two new Desktop files titled 'Desktop DB' and
'Desktop DF'. If there was a Desktop file present at the time that
the Desktop Manager was added to the system folder, it will remain,
but it will apparently not be used. (For verification, try opening
the Desktop file with ResEdit under Multifinder. On a Mac without the
Desktop Manager active, you will get the error message 'File already
open by another application," but if you try it while running DM, the
file will open without a complaint. Also, check the file's
modification date - with DM it will not have been modified for a while
(most likely since DM was installed); without DM, it is modified
several times a minute, it seems.
WDEF probably will infect a 'dormant' Desktop file, but since the file
is never opened, the Mac will never access the WDEF resource in that
file, so it should not spread.
This information is by no means gospel - but, seeing as how Apple has
not released any information about the Desktop Manager yet, it's all I
have to go on. Amendments and criticisms to my conclusions are
welcomed.
<< Brian >>
--
| Brian S. Kendig ^ Macintosh | /\ _||_ | bskendig |
| Computer Engineering |\ Thought | /__\ \ / | @phoenix.Princeton.EDU |
| Princeton University | \ Police | || \/ | @PUCC.BITNET |
| Systems Engineering, NASA Space Station Freedom / General Electric WP3 |
Technical Details
Message-ID:
<12230@phoenix.Princeton.EDU>Path:
arc1-ca.pugleaf.net!utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!tut.cis.ohio-state.edu!purdue!haven!udel!princeton!phoenix!bskendigReferences:
<4249@sbcs.sunysb.edu> <1989Dec15.154814.23071@ux1.cso.uiuc.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!attcan!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!tut.cis.ohio-state.edu!purdue!haven!udel!princeton!phoenix!bskendig From: bskendig@phoenix.Princeton.EDU (Brian Kendig) Newsgroups: comp.sys.mac Subject: WDEF and Desktop Manager (was Re: WDEF virus: Am I immune?) Message-ID: <12230@phoenix.Princeton.EDU> Date: 15 Dec 89 18:37:24 GMT References: <4249@sbcs.sunysb.edu> <1989Dec15.154814.23071@ux1.cso.uiuc.edu> Reply-To: bskendig@phoenix.Princeton.EDU (Brian Kendig) Organization: Systems Engineering, NASA Space Station Freedom Project Lines: 31