[comp.sys.mac.announce] Hypercard virus and SAM 3.0

levin@star-trek.bbn.com (Joel B Levin) (04/04/91)

Forwarded on behalf of the author of SAM.

	/JBL
 
******************
 
 
For SAM 3.0 Users:
 
A new Macintosh HyperCard virus has been found and has been named the HC Virus.
The virus infects only HyperCard stacks, and is mostly annoying. With SAM 3.0
you can download the latest Virus Definitions file from the Symantec bulletin
board which includes both detection and repair of stacks infected with this
virus. You can also enter a virus definition via SAM Virus Clinic 3.0 if you
only require detection capabilities for this virus. The proper virus definition
for SAM 3.0 is included here.
 
-------------------------------------
 
SAM 3.0 Virus Definition For HC Virus
 
 
Open the Data Definitions dialog in SAM 3.0 Virus Clinic by choosing "Add
Definition (Data)" from the Definitions menu. Then enter the following
information:
 
               Virus Name: HC Virus
                File Type: STAK
Search String pop-up menu: ASCII
 Search String text field: if char 1 to 2 of LookAtDate <11
 
The string in the Search String text field above is an ASCII string. Blank area
between words are spaces. The string IS case sensitive.
 
As a guard against incorrect entry, SAM 3.0 has a "Check field" in the
Definitions dialog boxes. If all of the above information is entered correctly,
then your check field should be A0BD.
 
Note that SAM 2.0 had the capability to detect and repair Hypercard viruses
(such as Dukakis), but did NOT have a data definitions entry dialog. This is
new to SAM 3.0.
 
 
Paul Cozza
SAM Author