lgeorge@melbcae.edu.au (02/01/89)
It would appear that RWatcher does NOT like MFS disks! Well, either that or 400K disks, but everytime I mounted this disk [which I checked and it was "clean"] the finder would beep 10 times and quit to the finder, which would again try to mount the disk and then beep 10 times and quit to the finder, etc. Is it possible that it can't read the resources and therefore assumes that something fishy is going on? I also checked the disk with Virus Detective(1.1). I have my Virus Detective and my RWatcher looking for all the calls signs for nVIR (A and B), Scores, Hpat and INIT29, but Virus Detective didn't say a word, but RWatcher did the same loop again. An interesting point about RWatcher, if someone installs it in a system folder that is already infected with a virus, as soon as you do something that involves moving resources, like drag copy or duplicate then RWatcher catches the virus attempt and beeps ten times and then quits to the finder. Then it realises that the Finder is an infected application, so it beeps ten times and quits to the finder, and of course the Finder is an infected application, so it beeps ten times and quits to the Finder, etc... I thought it was strange that RWatcher didn't notice that the System/Finder were infected on startup. Anyway, just a few notes... George Stamatopoulos La Trobe University - Lincoln School of Health Sciences Melbourne Victoria Australia
jln@accuvax.nwu.edu (John Norstad) (02/03/89)
Hi - I'm John Norstad, the author of RWatcher. > It would appear that RWatcher does NOT like MFS disks! Well, either > that or 400K disks, but everytime I mounted this disk [which I checked > and it was "clean"] the finder would beep 10 times and quit to the > finder, which would again try to mount the disk and then beep 10 times > and quit to the finder, etc. You have a sick machine. RWatcher does not look at, complain about, or have anything to do with any kinds of disks, MFS, HFS, 400K, 800K, or otherwise. The MFS floppy in question may indeed be clean, but I'll bet your hard drive (or other boot floppy) is infected. I suspect that your system is infected with INIT 29, and that you've reconfigured RWatcher to look for INIT 29, or all INIT resources, or something. The details are complicated, and I can't really say for sure what's happening on your system. Which leads us to the next point... > An interesting point about RWatcher, if someone installs it in a > system folder that is already infected with a virus,.... See page 3 of the RWatcher document: WARNING: RWatcher WILL NOT protect you if you install it on a system that is already infected. ... The purpose of RWatcher, like Vaccine, is to protect clean systems against subsequent infection. If you install it on a system that is already infected all bets are off, and lots of strange things can happen, including the beep 10 times infinite loop phenomenon. John Norstad Academic Computing and Network Services Northwestern University Bitnet: jln@nuacc Internet: jln@acns.nwu.edu AppleLink: a0173