🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4955

WDEF virus.... (Mac)

#4955
From: Greg Ford
Date: Tue, 19 Dec 1989 01:04
30 lines
2323 bytes
Sure enough, my Mac II had WDEF on it.  It's first attack (on four
partitions) was December 9.  Funny thing was, immediately prior to my
discovery of this virus, my Mac II had been experiencing these same
symptoms of slow-closing windows.  In fact, it was common for the
mouse-depression lines in the go-away box of the window to take up to
5 seconds to appear and for the window to close.  This follows what
has been said about the virus earlier.  The other problem I had (which
has now gone away since erradication 5 days ago) was that when opening
a large file from the HD (Rodime, 140 Meg, Internal), it would often
crash during the read, and MacBugs would say it was damaged.  This
scared me because I haven't done a backup since September (I know, I
know no flames please), and this crash was coupled with the sound that
the HD makes when it starts up (you Rodime people know what I mean -
that click, and spinning sound).  Anyway, the problem has gone away,
and those same files open fine now that WDEF is gone.  Anyone else had
this problem?

As a side note, every single Mac on campus is infected near as I can
tell.  One lab with ~80 macs was infected in all 10 macs I randomly
sampled.  I gave the lab-room operator a copy of Disinfectant 1.5, but
he (get this) was unsure what to do with it.  I hope they've cleaned
it up.  If this thing (WDEF) passes from disk to disk just by
inserting an infected disk into a mac, can you imagine the headache
created by users who have they're own disks?  The whole lab can become
reinfected in one day.  What a mess.

*******************************************************************************
* Greg Ford				GEnie:    G.FORD3		      *
* University of Southern California	Internet: gford%nunki.usc.edu@usc.edu *
*******************************************************************************
Technical Details
Message-ID: <0004.8912191224.AA01435@ge.sei.cmu.edu>
Path: arc1-ca.pugleaf.net!utzoo!attcan!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!wuarchive!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!attcan!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!wuarchive!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: gford%nunki.usc.edu@usc.edu (Greg Ford)
Newsgroups: comp.virus
Subject: WDEF virus.... (Mac)
Message-ID: <0004.8912191224.AA01435@ge.sei.cmu.edu>
Date: 19 Dec 89 01:04:18 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 30
Approved: krvw@sei.cmu.edu