of Minnesota in August, 1989.

nFLU is yet another simple clone of nVIR B, discovered at the University



Belgium in April, 1989.

MEV# is yet another simple clone of nVIR B. It was first discovered in



Hpat, AIDS is a simple clone of nVIR B.

The AIDS virus was first discovered in Holland in March, 1989. As with



technical differences, it is identical to nVIR B.

The Hpat virus was first discovered in late 1988. Except for a few minor



is enough to cause problems.

As with Scores, nVIR occupies both memory and disk space, and this alone



type “nVIR,” which is how it got its name.

One of the viral resources added to infected files by nVIR has the resource



detection tool.

by looking at your system. You must run Disinfectant or some other virus

Unlike Scores, there is no way to tell that you have an nVIR infection just



properly repair them.

that such offspring are infected by both nVIR A and nVIR B, and will

new viruses combining parts of their parents. Disinfectant will report

It is possible for nVIR A and nVIR B to mate and reproduce, resulting in



program is run with a probability of 1/64.

run with a probability of 7/32. A double beep will happen when an infected

probability of 1/8. A single beep will happen when an infected program is

not call MacinTalk. The beep will happen on a system startup with a

When the counter reaches zero, nVIR B will sometimes beep. nVIR B does



or beep twice with a probability of 1/256.

when an infected application is run, nVIR A may say “don’t panic” twice

probability of 15/128, when an infected application is run. In addition,

system startup with a probability of 1/16. It will also happen, with a

MacinTalk is not installed in the system folder). This will happen on

panic” (if MacinTalk is installed in the system folder) or beep (if

When the counter reaches zero, nVIR A will sometimes either say “don’t



time an infected application is run.

one each time the system is started up and it is decremented by two each

infected, a counter is initialized to 1000. The counter is decremented by

At first nVIR A and B only replicate. When the System file is first



files are not infected or modified.

the Finder and DA Handler usually also become infected, and document

minute delay. As with Scores, some programs are immune to infection,

application is run, it becomes infected immediately, without the 2-3

applications immediately, without the 2 day delay. Whenever a new

does not create any invisible files. nVIR begins spreading to other

System file, but it does not infect the Note Pad or Scrapbook files, and it

nVIR is simpler than Scores. When it attacks your system, it infects the



“nFLU.”

and “nVIR B,” and four clones named “Hpat,” “AIDS,” “MEV#” and

virus was written. We know of two basic strains, which we call “nVIR A”

1987, and in the United States in early 1988. At least one variation of the

According to news reports, the nVIR virus first appeared in Europe in



===========

The nVIR Virus