[comp.virus] Virus "WDEF A", help!

SURF124@KUB.NL (Willem van der Wal, ICP, NIAS) (11/14/90)

My hard disk refuses to save files, though I can still access them
Desinfectant 2.0 seems to have spotted a virus called "WDEF A".  I'd
rather not re-initialize the (external) hard disk.  The contamination
is of Israelian origin most likely.  Could someone please tell me how
to proceed.

Many thanks,
Willem van der Wal, SURF124@KUB.NL.BITNET

kevin@crash.cts.com (Kevin Hill) (11/18/90)

SURF124@KUB.NL (Willem van der Wal, ICP, NIAS) writes:

>My hard disk refuses to save files, though I can still access them
>Desinfectant 2.0 seems to have spotted a virus called "WDEF A".  I'd
>rather not re-initialize the (external) hard disk.  The contamination
>is of Israelian origin most likely.  Could someone please tell me how
>to proceed.

>Many thanks,
>Willem van der Wal, SURF124@KUB.NL.BITNET
>From kevin Sun Nov 18 06:34:16 1990

  My hard drive also has the same problems.  It will read fine, but
will not write.  if anyone else has had similar problems, please
write, perhaps the problem isn't hardware but a new virus?  Or maybe I
am just getting all excited for no reason..  Anyone who can help, I
would greatly appreciate the help!  Thanks.

JAHAYES%MIAMIU.BITNET@OHSTVMA.IRCC.OHIO-STATE.EDU (Josh Hayes) (11/26/90)

From the documentation that comes with Disinfectant 2.3, it seems that
WDEF comes in two strains, the A and B strain; the latter beeps when
it infects a new disk, the former doesn't.

It attacks only the Desktop file; as a consequence, you should
be able to eliminate the infection by booting from a LOCKED floppy
and holding down shift-option-cloverleaf as you boot, until you
get the "Are you sure you want to rebuild the desktop on "DiskName"?
This may take a few minutes". Just do it. Apparently, rebuilding the
desktop eliminates current infection of that file. Remember, though,
that EVERY SINGLE FLOPPY that talked to your infected computer will
also have an infected Desktop file and will need to have it either
rebuilt, or scanned and disinfected using Disinfectant or the like.

I have waged a fairly continuous war against this little booger for
the last two months in our department, as there are sufficient numbers
of idiots who continue to use the same old infected disks to re-infect
cleaned ones....grrrrr....this particular virus is bad news especially
for the portable and IIci; perhaps also for the newer models as well.
Hope this helps.

Josh Hayes, Zoology Department, Miami University, Oxford OH 45056
voice: 513-529-1679      fax: 513-529-6900
jahayes@miamiu.bitnet, or jahayes@miamiu.acs.muohio.edu
"I am the Supreme Being, you know; I'm not completely dim."