[comp.virus] More on the new Mac Trojans

D1660@applelink.apple.com (02/08/90)

More on the new Mac Trojans:

In response to Peter Johnston's message about the Trojans Mosaic and
FontFinder, I'd like to add a few things:

The Trojans hang (whether or not SAM denied the write attempt) due to
a bug in the code. When the bug is 'fixed', Mosaic goes on to give
further information to the user about what it has done.

As Peter mentioned, disks ARE undamaged if the Trojans' write attempt
is denied in SAM. All versions of SAM will alert you to this write
attempt with the message 'There is an attempt to bypass the file
system'. HOWEVER, this alert will only be given to the user if SAM is
configured in ADVANCED level.

Again, the best protection, as always, is to be sure your files are
backed up!

Paul Cozza