🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4964

Re: WDef and Gatekeeper Aid.

#4964
From: Dave Platt
Date: Tue, 19 Dec 1989 19:30
36 lines
2308 bytes
C0195@UNIVSCVM.BITNET (Gregory E. Gilbert) writes:
> I booted some Macs with Gatekeeper Aid installed this AM.  I was
> immediately presented with a rather sharp looking dialog announcing
> that the "Implied Loader ABDS" virus(?) was found and removed.
>
> Is this the Wdef virus?  If so, why not call it such AND what is an
> "Implied Loader ABDS".

The "ADBS" resource in the Desktop file is almost certainly not a virus.
Rather, it's the signature for the Adobe Separator application.

Unfortunately, "ADBS" is one of the resource-types that Apple has
reserved for its own use... per Inside Mac V, resources of this type
hold code which acts as an interface to the Apple Desktop Bus and its
devices (keyboard, mouse, etc.).  Because this resource-type can contain
executable code, Gatekeeper Aid considers that it shouldn't be in the
Desktop file.

I don't know how a commercial application ended up with a signature-
resource that's identical to one on Apple's list of reserved types.
there are several ways in which this could have happened... all of
which would appear to involve a bit of an oversight on someone's part.

Removing this particular resource from the Desktop file might have some
adverse effects on the Adobe Separator application.  In particular, I
might expect to see its documents revert to the generic icon, and you
might not be able to double-click on a Separator document and launch the
application.

I believe that Chris will be updating the documentation for Gatekeeper Aid
to warn of this problem.
- --
Dave Platt                                             VOICE: (415) 493-8805
  UUCP: ...!{ames,apple,uunet}!coherent!dplatt   DOMAIN: dplatt@coherent.com
  INTERNET:       coherent!dplatt@ames.arpa,  ...@uunet.uu.net
  USNAIL: Coherent Thought Inc.  3350 West Bayshore #205  Palo Alto CA 94303
Technical Details
Message-ID: <0004.8912201621.AA09547@ge.sei.cmu.edu>
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: coherent!dplatt@ames.arc.nasa.gov (Dave Platt)
Newsgroups: comp.virus
Subject: Re: WDef and Gatekeeper Aid.
Message-ID: <0004.8912201621.AA09547@ge.sei.cmu.edu>
Date: 19 Dec 89 19:30:03 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 36
Approved: krvw@sei.cmu.edu