From "[email protected] (William Homer Waits)" Tue Aug 24 17:03:34 1993 Date: Mon, 23 Aug 1993 22:55:39 -0400 From: [email protected] (William Homer Waits) Subject: SAM Installer Scripts In response to some complaints on the Internet regarding the un-intuitive installer script for Symmantec's popular vir…

AntiGax is a free program which detects and repairs files infected by the recent 'Graphics Accelerator' virus (also known as SevenDust-E and MDEF-9805-E). This archive also includes GAx Defender, which is an extension that checks programs for the virus as you run them. Instructions on their use are in the readme - pl…

To the moderators: This is a summary of the two files in the \info-mac\vir\ subdirectory entitled "a-toast-to-disinfectant.txt" and "a-toast-to-disinfectant-pt4.txt". It combines the two files into one, and I have also removed a lot of padding with spaces that somehow crept into the subfiles. As a result, this file i…

Autostart Worm Cleaner lite == Release 98/05/22 Version 1.0.1 The Autostart Worm Cleaner lite is an Applescript that removes known autostart worms. This release recognizes: - Autostart worm 9805 - Autostart worm 9805-B - Autostart worm 9805-C The script requires the scripting additions Jon's Commands and Process…

BugScan 1.0b1 October 23, 1998 BugScan is freeware - by downloading this file, you agree to use it at your own risk. This application was mainly designed for our clients to determine if they do in fact have the AutoStart and Graphics Accelerator files on their hard drives. These viruses have become real pests for ma…

Disinfectant 3.7.1 is a new release of our free anti-viral utility for the Macintosh. 3.7.1 Release Notes (July 9, 1997) -- Version 3.7.1 fixes an error which could sometimes cause crashes when scanning very rare kinds of files while pass the new "more lenient" check for damaged resource forks which was intro…

disinfectant 3.7.1 italian From: [email protected] Subject: disinfectant 3.7.1 italian Italian localized version of this famous antivirus for Macintosh. Official translation made by: [email protected]. See included read me files for details.

Eradicator v.1.0.1 is freeware which removes the new Mac worm Autostart 9805. It is released as a service to Mac users by Hong Kong IT company Uptown Solutions Ltd. Autostart 9805 infects PPC Mac OS systems (7 & 8) with QuickTime 2.0 or above and with mounted HFS or HFS+ volumes and CD-ROM AutoPlay enabled. It adds in…

-- _36297202==_ Content-Type: text/plain; charset="us-ascii" Gatekeeper 1.3 is a set of Macintosh system extensions (INITs) and related control panels (cdevs) which, when active (i.e. allowed to install themselves during the boot process) offer protection against attacks by all known viruses (to the author at the …

As you probably know, the Good Times virus is a hoax. The FAQ provides answers to many questions about the hoax, gives a history, debunks some myths, and points to some other sources of information. The FAQ also gives directions for finding the two-page mini FAQ.

HyperGatekeeper is an anti-viral stack for all known HyperCard script viruses. It is designed to detect unknown viruses as well, but whether that will work or not depends on the individual viruses. This stack has been tested with all the viruses I had on hand (for some reason, HyperCard viruses are hard to find; I had…

Autostart 9805 worm scanner and cleaner. freeware.

Will update MacTools to find and clean the NVP trojan Horse.

Here's the MacTools CPAV antidotes file (aka MACSIG), dated 4/2/94. This has the README file included, and is ready to be placed on FTP sites. I'll also be sending this off to info-mac. --Chall Fry-- (Central Point Software)

Complete descriptive is included in the MacFile.ID textual descriptive file included in the archive.

From [email protected] Thu Sep 2 10:50:01 1993 Date: Wed, 1 Sep 1993 22:07:07 -0700 (PDT) From: [email protected] Subject: "Merry Xmas" Killer I have recently experienced one of the most annoying Macintosh para- sites of all time -- the virus. Although only a HyperCard virus, "Merry Christmas" is an an…

This stack eliminates script based viruses which spread themselves by appending the scripts of other stacks with additional instructions which in turn infects every stack they come in contact with. The original virus of this ilk is called "merryxmas." Since the appearance of merryxmas, other strains have surfaced such…

merryxmasWatcher2.0.cpt.hqx is a free HyperCard 2.1 stack that scan and erradicates for the merryxmas and merry2xmas viruses. The watcher script, which is installed in the Home stack of HyperCard, will watch stacks for you as you work. By making use of the watcher script you won't need to scan each new HyperCard stack …

Bill, Will you please post the above "INIT-M Vaccine" for Rival below. Yours, Frederic

Rudolph is an automated merryxmas and merry2xmas virus fighter. It can detect and disinfect stacks infected with the merryxmas virus. Further, it inoculates stacks against ever being infected. Rudolph is a major improvement over other anti-merryxmas stacks in the following ways: 1) automated execution and quitting (run…

NOTE: this file is for SAM 3.0.x and SAM 3.5.x only.If you have SAM 4.0.x, then you'll need to download SAMDef.405. New Virus Definitions with a new def added for the HC9507 Hypercard virus. This is an .sea file. Download it. Expand it. Then drop these files onto the system folder and let them replace the files there n…

This is the latest version (4.07, 11/22/95) of SAM virus definitions for version 4 of SAM. Do not use with version 3. Sorry, no equivalent for SAM-3 was on CompuServe's Symantec forum. The below message from Stephen Zeffren explains the update. Al Bloom New SAM Virus Definitions file and SAM Help file for DETECTION …

In response to some complaints on the Internet regarding the un-intuitive installer script for Symmantec's popular virus program SAM* 3.5. Symmantec's script will not do an installation if you have replaced the original Virus Definition file. Go figure! I don't know about you, but I update mine when necessary on the or…

Scrooge v2.0 kills the merryxmas hypercard virus and a good number of its possible mutations. Also at your option inserts "antibodies" into your stacks so that they become "immune" to this virus. The antibodies are quite inert, but they may trigger other merryxmas virus detection algorithms. There were never any bug r…

The following text file lists viruses detected by all versions of Virex since 1.0. It also lists UDV codes for viruses discovered since version 3.5. The list came from the Datawatch forum on America Online. Disclaimer: I have no relation to Datawatch/Virex other than being a customer. If you have any problems with Vir…

Virus Reference 2.1.6 Online Database of Macintosh Viruses Virus Reference is a HyperCard based database of Macintosh viruses and trojan horses. Includes search capabilities, and detailed descriptions of symptoms. This update includes information on the Word Macro 9508 virus, recently discovered.

An AntiVirus HyperCard Stack. This stack helps you detecting and disinfecting your stacks, which may be infected with the "Merry XMas" Virus. You also can install an active virus protection in your home stack. For more information use: E-Mail: [email protected] Internet: http://rfhs0002.fh.uni…

WormFood v1.5 October 24, 1998 Author: Doug Baer Purpose: Scan for the AutoStart 9805 A-F strains and attempts to find new strains. Features quarantine ability. Version History: 10/23/98 - v 1.5 * complete rewrite of the scan engine for increased speed and better heuristics * no longer deletes files --> moves them…

WormGuard is a freeware system extension that actively protects you from the AutoStart 9805 worm whenever a volume is mounted or a file is accessed by any application. If the infection is found, it is automatically removed and you are notified of what happened via the MacOS Notification Manager. Version 1.0.2 fixes the…

This program scans your local drives for the AutoStart 9805 worm variants, and will also alert you to unknown files with suspiciously similar properties. It is based on published descriptions of the activities of these worms. I have not personally tested it on real worms. Worms may lurk inside disk image files, but un…