Abstracts from files in info-mac/vir as of Sun 20 Mar 2005
#### TEXT 00what-to-use.txt ****
Here are our current recommendations for virus-related tools. Such tools can
be divided into three classes: those that prevent infections, those that warn
you when an infection is present, and those that remove infection. This
message only discusses non-commercial software.
1. Prevention
Two excellent tools for prevention of viral infections are the Disinfectant
extension (distributed as part of the Disinfectant application) and
the Gatekeeper package.
The Disinfectant extension is very easy to install and requires no
user configuration. However, it is important to stay up-to-date with this
tool, because it only recognizes viruses it has been taught about.
Gatekeeper is an effective virus-prevention method for the more
technically inclined. It requires some customization to work well in a
particular environment. The benefit of Gatekeeper is that it provides
some protection against some possible kinds of future virus, not just
#### TEXT a-toast-to-disinfectant.txt ****
From: bmunday@tecnet1.jcte.jcs.mil
Date: Thu, 29 Sep 94 13:51:40 EDT
Subject: Disinfectant: A Toast (Summary)
To the moderators:
This is a summary of the two files in the \info-mac\vir\ subdirectory
entitled "a-toast-to-disinfectant.txt"
and "a-toast-to-disinfectant-pt4.txt".
It combines the two files into one, and I have also removed a lot of
padding with spaces that somehow crept into the subfiles. As a result,
this file is only 48k while the two subfiles total 72k. This should reduce
(a little bit, at least) the required disk space. Please remove the two
older files for me. Thank you.
To everyone else: This is a complete summary of the 95 messages I received
in response to my request for messages thanking John Norstad and all the
other folks who have helped with Disinfectant over the years. Thanks to
everyone who wrote; John sent me his thanks for the mailing, which I pass
#### BINHEX alternate-sam-35-install.hqx ****
From "gt3017c@prism.gatech.edu (William Homer Waits)" Tue Aug 24 17:03:34 1993
Date: Mon, 23 Aug 1993 22:55:39 -0400
From: gt3017c@prism.gatech.edu (William Homer Waits)
Subject: SAM Installer Scripts
In response to some complaints on the Internet
regarding the un-intuitive installer script for
Symmantec's popular virus program SAM* 3.5.
Symmantec's script will not do an installation
if you have replaced the original Virus Definition
file. Go figure! I don't know about you, but I
update mine when necessary on the original disks.
I have created my own scripts which should work
fine. I have System 7.1, and I know it works there,
but I also have created a System 6 installer. It
should work fine, but I have no place to test it.
Only the target folders have changed. These scripts
only recognize the Virus Definitions file on the
Decontamination Disk, so make sure that is where
you place your updated Definition file.
If you decide to use these, please just e-mail me
and let me know that you have used it. Also, let
me know about any troubles you may have. I can be
reached at the following addresses:
gt3017c@prism.gatech.edu (until 6/94)
or
Heathen@aol.com
SAM* is copyrighted by Symmantec Corp. I have
no affiliation with them.
Al Bloom, this one's for you!
#### BINHEX antigax-13.hqx ****
From: s2191331@cse.unsw.edu.au
Subject: Graphics Accelerator Antivirus program
AntiGax is a free program which detects and repairs files infected by the
recent 'Graphics Accelerator' virus (also known as SevenDust-E and
MDEF-9805-E).
This archive also includes GAx Defender, which is an extension that checks
programs for the virus as you run them.
Instructions on their use are in the readme - please read it.
More information is available on the web at this address:
<http://www.cse.unsw.edu.au/~s2191331/antigax/antigax.html>
{P^/
John Dalgliesh
s2191331@cse.unsw.edu.au
#### BINHEX autostart-worm-cleaner-lite.hqx ****
From: tnharris@iname.com
Subject: Autostart Worm Cleaner lite 98/05/22
Autostart Worm Cleaner lite
===========================
Release 98/05/22
Version 1.0.1
The Autostart Worm Cleaner lite is an Applescript that removes known
autostart worms. This release recognizes:
- Autostart worm 9805
- Autostart worm 9805-B
- Autostart worm 9805-C
The script requires the scripting additions Jon's Commands and
Processes (part of Script Tools). It should run on any system with
AppleScript installed.
Copyright 1998, Tom N Harris
<mailto:tnharris@iname.com>
<http://www.cfw.com/~etienne/mac/>
#### BINHEX bscan-2.hqx ****
From: mark@mrdataworks.com
Subject: BugScan 1.0b1 Revision
BugScan 1.0b1
October 23, 1998
BugScan is freeware - by downloading this file, you agree to use it at your own risk.
This application was mainly designed for our clients to determine if they do in fact have the AutoStart and Graphics Accelerator files on their hard drives. These viruses have become real pests for many of us. Make sure you use Virex or Norton Anti Virus if you get a red light (and then call your local computer consultant). If you get a green light, bonus! If you don't own one of these applications already, make one of them your next purchase.
BugScan will detect all files for all strains of the AutoStart 9805 Worm current at 10/23/98 as well the Graphics Accelerator Extension (GAX). BugScan will also detect any combination of these files. Click BugScan's 'Help' button to read more about the viruses themselves.
We strongly recommend that you restart your Mac with extensions off (holding down the 'shift' key) before running BugScan. You can now restart your Mac from directly within BugScan if needed.
BugScan gives you two scanning options:
Quick Scan Method
Checks for AutoStart and Graphics Accelerator files in their exact locations on the selected volume. This method does a top level scan and a system level scan on the selected volume (a system level scan is performed only if there is a System Folder on the selected volume).
Full Scan Method
Checks for AutoStart and Graphics Accelerator files in all locations on the selected volume - in other words, everywhere. Note that the full scan method takes much longer and even longer yet when scanning network volumes. This is, however, the recommended method.
BugScan gives you three menu options:
Install 9805 Defense
Creates invisible, locked folders in the appropriate locations on your startup disk to combat the AutoStart 9805 Worm.
Install GAX (Graphics Accelerator) Defense
Creates an invisible, locked folder in the Extensions Folder on your startup disk to combat the Graphics Accelerator Virus.
Open QuickTime Control Panel
Opens the QuickTime Control Panel and prompts you to turn the "Enable CD-ROM AutoPlay" function off. BugScan quits immediately after opening the Control Panel.
If BugScan locates any virus applications and/or virus reference files, BugScan will attempt to remove them. If any of the files are already in use (infecting your hard drive), BugScan warns you and prompts you to delete them manually. BugScan will do its very best to make any invisible files visible and to move all these files to the trash. If this is not necessary, the files will be deleted but you'll still need to do a proper virus scan to see if the rest of your Mac has been infected. Hopefully not.
Running BugScan does not make your Mac instantly 'safe'! Everyone needs to practice "safe computing" from now on!
Remember to do a proper virus scan using Virex or Norton Anti Virus. The bad news is that if you've been infected for some time now, you'll probably be looking at a complete reformat and re-install. The best advice we can give you is to get on this ASAP.
We do not provide free technical support for freeware (nor free technical support for virus-hunting, troubleshooting and maintenance).
Good luck...
Long Live Apple!