virii vs System 7.0 (Mac)

Article View: comp.virus

Article #4417

#4417

From: Geoff Bronner
Date: Wed, 29 May 1991 20:19

25 lines
1437 bytes

I recently had the pleasure of working with a hard disk running under
System 7.0 which had been infected with the nVir A and B viruses.
Disinfectant was able to remove the viruses without any problems once
another disk was used as the startup disk.

What was interesting to note however was what had been infected.
Several applications including Microsoft Word had been infected (which
is not surprising) but so had several Control Panels. Under the new
system cDevs and DA's and such can be accessed like applications and
it appears the nVir viruses are fooled into infecting them like
applications as well!

One other note. The virus was caught with a regular check and the
workstation had shown no unusual behavior so nVir didn't appear to be
causing problems.

Has anyone else observed this kind of behavior under System 7.0?

- -Geoff

- --
	geoffb@eleazar.Dartmouth.EDU
	Alpha Theta House Historian
	"Don't believe the hype!"
		-Public Enemy

Technical Details

Message-ID: <0013.9105301427.AA10625@ubu.cert.sei.cmu.edu>

Path:

arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: geoffb@eleazar.dartmouth.edu (Geoff Bronner)
Newsgroups: comp.virus
Subject: virii vs System 7.0 (Mac)
Message-ID: <0013.9105301427.AA10625@ubu.cert.sei.cmu.edu>
Date: 29 May 91 20:19:11 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 25
Approved: krvw@sei.cmu.edu