-- card: 26519 from stack: in -- bmap block id: 0 -- flags: 0000 -- background id: 2783 -- name: WDEF Virus Operation -- part contents for background part 10 ----- text ----- WDEF Virus Operation -- part contents for background part 12 ----- text ----- WDEF Virus WDEF Virus Resources WDEF Virus Removal -- part contents for background part 2 ----- text ----- The current theory of operation for this virus is that it places a WDEF resource into the invisible System file Desktop. The Finder then uses this counterfeit definition to draw its windows allowing the virus to do its damage. It also seems to be specifically designed to bypass the detection schemes used by Vaccine and GateKeeper.