home *** CD-ROM | disk | FTP | other *** search
-
- xThe MDEF Virus
-
-
- There are four known strains of the MDEF virus. All of them were
-
- discovered in Ithaca, New York. The MDEF A strain was discovered in
-
- May, 1990 and is also sometimes called the “Garfield” virus. The MDEF B
-
- strain was discovered in August, 1990 and is also sometimes called the
-
- “Top Cat” virus. The C and D strains were discovered in October, 1990
-
- and January, 1991, respectively.
-
-
- Prompt action by computer security personnel and investigators of the
-
- New York State Police resulted in identification of the author. The author,
-
- a juvenile, was released into the custody of his parents after consultation
-
- with the district attorney. The same person was responsible for writing
-
- the CDEF virus.
-
-
- The A, B, and C strains of MDEF infect both applications and the System
-
- file. They can also infect document files, other system files, and Finder
-
- Desktop files. The Finder and DA Handler also usually become infected. The
-
- System file is infected as soon as an infected application is run. Other
-
- applications become infected as soon as they are run on an infected
-
- system.
-
-
- The D strain of MDEF only infects applications, not system files or
-
- document files. Applications can become infected even if they are never
-
- run. An application infected by MDEF D beeps every time it is run. We do
-
- not believe that the D strain of MDEF was ever released to the public.
-
- Disinfectant recognizes it anyway, just in case it was inadvertently
-
- released.
-
-
- The MDEF viruses do not intentionally attempt to do any damage, yet they
-
- can be harmful. They do not display any messages or pictures.
-
-
- The MDEF B and C strains attempt to bypass some of the popular
-
- protection INITs.
-
-
- The MDEF C strain contains a serious error which can cause crashes and
-
- other problems.
-
-
- The MDEF D virus can damage some applications in such a way that
-
- Disinfectant cannot repair them properly. In this situation, Disinfectant
-
- removes the virus from the application and issues a special error
-
- message, telling you that the resulting file is damaged and should not be
-
- used. You should immediately delete the damaged file and replace it with a
-
- known good copy from an original release disk.
-
-
- The MDEF viruses are named after the type of resource they use to infect
-
- files. MDEF resources are a normal part of the Macintosh system, so you
-
- should not become alarmed if you see them with ResEdit or some other
-
- tool.
-
-
- The MDEF, WDEF and CDEF viruses have similar names, but they are
-
- completely different and should not be confused with each other.
-
-
-
-