[comp.virus] Virus on Startup Screen?

barnett@unclejack.crd.ge.com (Bruce Barnett) (06/29/90)

We have been having problems with MacIIci and Microsoft mail.
I suspect a new type of virus.

The Mac crashes when clicking "SETUP" in the chooser when selecting
	a mail server.
The Mac also crashes when opening the Microsoft Mail DA.

I have replaced the entire system folder, and re-installed TOPS, etc.

If I put back the start-up screen in the system folder, Microsoft
Mail crashes. (System error 12, or the screen freezes.)
When I move the start-up screen to a new place and
restart the Mac, everything works fine.

This is repeatable. The start-up screen seems to be infected.

This problem has happened on several new Mac's (all MacIIci's)
in far ends of the building.  OS 6.0.4 and 6.0.5.
But not every MacIIci crashes.

I haven't narrowed it down to an exact combination of what must be
replaced when this crash occurs. But replacing (not updating) the
system, re-installing TOP and Microsoft mail, and deleting the
start-up screen seem like the best solution we have right now.

This corrupted "system" problem has been ten times harder to fix
than any virus we have seen. We use SAM 2.0 and Disinfectant 1.8, and
they find nothing wrong with the startup screen.

Can the startup screen contain a virus?

- --
Bruce G. Barnett	barnett@crd.ge.com	uunet!crdgw1!barnett

barnett@grymoire.crd.ge.com (Bruce Barnett) (07/06/90)

I wrote:

>   We have been having problems with MacIIci and Microsoft mail.
>   I suspect a new type of virus.

There is a conflict with Sam 2.0.0, MS Mail, and a start-up screen.
Either
	1) Upgrade to SAM 2.0.2b
	2) Rename MS Mail and/or SAM so MS Mail INIT's before SAM
	3) delete the start-up screen
	4) Patch the WDEF on MS Mail so that the WDEF (#16) has the
	   system Heap check box on (Use Get Info and ResEdit)

Microsoft Mail also has a problkem with MacMainframe from Avatar.
	A rename of INIT's fixes this also.
Sam also reacts to MacPassword in a fashion similar to MS Mail.

Thanks to all, and esp. Paul "Mr. SAM" Cozza.
- --
Bruce G. Barnett	barnett@crd.ge.com	uunet!crdgw1!barnett