isle@eleazar.dartmouth.edu (Ken Hancock) (01/14/89)
DISCLAIMER: This is not meant to be alarmist. Merely information to
use as you would any other.
THE BAD NEWS:
Well, it's been said that nVIR will infect Systems, Finders, and
Applications. Add another category to that. SOME INITs.
For those of you disbeliving minds, on a rainy day try this:
1. Install SuperLaserSpool 5.0 on a disk with a System Folder.
(I used System 6.0.2)
2. Startup, run an infected application, bingo. Your System
is infected.
3. Restart your computer, bingo. SuperLaserSpool is infected.
NOTE: Interferon will pick both of these infections up.
4. Disinfect using your favorite program. Did you notice that
neither Repair, AntiPan, Vaccination, or any other program
will disinfect INITs? (save for one...see below).
Run Interferon. Note that SuperLaserSpool is still infected.
5. Restart your Mac. When SuperLaserSpool INIT runs, it infects
your System. (See a cycle developing?)
THE GOOD NEWS:
Use the program I use, KillVirus INIT. KillVirus will:
1. Protect your mac from future infection by installing
an nVIR 10 resource which keeps nVIR from infecting
the System.
2. Disinfect both SuperLaserSpool and System on startup,
and disinfect any infected application whenever it
is launched.
Now, if some nVIR guru will tell me how the above can happen
when supposedly nVIR cannot infect anything but Systems, Finders,
and Applications? I haven't looked into any other special INITs.
Who knows how many special INITs there are that act in this manner?
If you have any question or answers, please post or e-mail.
Ken Hancock
Ken Hancock '90 | BITNET/UUCP/
Personal Computing Ctr Consultant | INTERNET: isle@eleazar.dartmouth.edu
-----------------------------------+----------------------------------------
DISCLAIMER? I don't get paid enough to worry about disclaimers.MacUserLabs@cup.portal.com (Stephan - Somogyi) (01/16/89)
SuperLaserSpool is not a proper init. To the best of my recollection the installation procedure does the same as a 'Set Startup' on SLS. SLS then quits to the Finder when it's done. SLS is in fact an application, therefore it has a CODE 0 that can be messed with. Stephan <- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -> Stephan Somogyi AppleLink: X1058 Software Engineer BIX: mulabs MacUser Labs CIS: 72511,16 950 Tower Lane, 18th Floor GEnie, MacNET: MULABS Foster City, CA 94404 FAX: (415) 378-5675 ...sun!cup.portal.com!MacUserLabs or MacUserLabs@cup.portal.com Any opinions expressed above are mine