[comp.sys.mac.misc] VIRUS

georgeh@phred.UUCP (George Harmon) (09/06/90)

If you are experiencing excessive server
access activity between your Mac and
a AppleShare server, check to see 
that you don't have WDEF_A virus. 
I was and I did.

pkane@peg.UUCP (04/30/91)

Is anyone aware of a problem with gatekeeper running under finder.
I am getting a number of reported errors in files that I believe are
clean:
Res(System) [RsrcMapEntry(DRVR,2)]
Alternatively have I been infected by a virus?
Disinfectant 2.4 says that my system is clean.
!!!HELP!!!

ephraim@think.com (Ephraim Vishniac) (05/01/91)

In article <198900010@peg> pkane@peg.UUCP writes:
>Is anyone aware of a problem with gatekeeper running under finder.

Under 6.0.7, yes.

>I am getting a number of reported errors in files that I believe are
>clean:
>Res(System) [RsrcMapEntry(DRVR,2)]
>Alternatively have I been infected by a virus?
>Disinfectant 2.4 says that my system is clean.
>!!!HELP!!!

Your system probably is clean.  System 6.0.7 introduced a change in
the normal operation of printing that triggers this alarm from
Gatekeeper. I believe the problem is fixed by installing the latest
version of Gatekeeper Aid.

--
Ephraim Vishniac    ephraim@think.com   ThinkingCorp@applelink.apple.com
 Thinking Machines Corporation / 245 First Street / Cambridge, MA 02142
        One of the flaws in the anarchic bopper society was
        the ease with which such crazed rumors could spread.

pkane@peg.UUCP (05/17/91)

The "virus" problem I am seeing seems to be a difference between
the way Finder and MultiFinder handles print requests in System
6.07.

I recently installed System 6.07. The problem I have been having
manifested itself a few weeks later when I dropped back into
Finder. Gatekeeper now vetos a system(resource) request for print
requests under Finder but not MultiFinder.

The solution seems to be to either just run MultiFinder or to
enable Sys(Res) requests for all applications which need to print.
I think I'll only enable requests where I have to and wait for
System 7. I am informed it is like running MultiFinder
continuously.

dplatt@ntg.com (Dave Platt) (05/19/91)

In article <198900011@peg> pkane@peg.UUCP writes:

>The "virus" problem I am seeing seems to be a difference between
>the way Finder and MultiFinder handles print requests in System
>6.07.

Correct.  Something changed in 6.0.7.  It hasn't ever been documented
properly.

>The solution seems to be to either just run MultiFinder or to
>enable Sys(Res) requests for all applications which need to print.
>I think I'll only enable requests where I have to and wait for
>System 7. I am informed it is like running MultiFinder
>continuously.

There are a couple of better solutions:

-  Upgrade to Gatekeeper 1.2, recently posted to various archives (it'll
   be around on the comp.binaries.mac geetar before too long, I
   imagine).  Gatekeeper 1.2 is aware of the 6.0.7 behavior, and doesn't
   sound the alarm.

-  Install the current (pre-1.2) Gatekeeper Aid with your copy of
   Gatekeeper 1.1.1.  Gatekeeper Aid modifies Gatekeeper 1.1.1 to avoid the
   problem. 

-- 
Dave Platt                                                VOICE: (415) 813-8917
              Domain: dplatt@ntg.com      UUCP: ...apple!ntg!dplatt
 USNAIL: New Technologies Group Inc. 2468 Embarcardero Way, Palo Alto CA 94303