Megarom/Megarom Macintosh CD Software (Quantum Leap)(1992).iso/VIRUS Utils/Code 252 Virus Info (SAM)

Text File | 1992-04-17 | 3.7 KB | 87 lines | [TEXT/GEOL]

As part of Symantec's commitment to virus protection, it is our responsibility
to inform you that a new Macintosh virus was recently discovered, called CODE
252 which affects all Apple Macintosh computers systems.  This virus is
designed to spread from January 1 through June 5 of any year.  If your system
is infected, CODE 252 will be triggered on June 6 and after.  It does not cause
any intentional damage to files or disks, but it will display the following
message:

   You have a virus.
   Ha Ha Ha Ha Ha Ha Ha
   Now erasing all disks...
   Ha Ha Ha Ha Ha Ha Ha
   P.S. Have a nice day.
   Ha Ha Ha Ha Ha Ha Ha
   (Click to continue...)

However, an infected system may behave erratically, crashing now and then.  The
virus infects the System, Finder, and applications and spreads very quickly
under System 6.

Owners of SAM Version 3.0 can instantly update the detection and protection
capabilities of the program against this new virus by entering the new virus
definition into SAM Virus Clinic.  In conjunction with the new SAM User
Definition and SAM 3.0, you will be able to scan for CODE 252 from both Virus
Clinic and SAM Intercept.

UPDATE DETECTION INSTRUCTIONS

PLEASE NOTE THAT THIS WILL BE A TWO-STEP PROCESS, REQUIRING TWO DIFFERENT VIRUS
DEFINITIONS WITH THE SAME VIRUS NAME.

STEP 1. Open SAM Virus Clinic.  From the Options menu select "Advanced Menus".
Select "Add Definition (Resource)" from the Definitions menu.  Now enter the
following information:

Virus Name:CODE 252
Resource Type: CODE
Resource ID:   = 252
Resource Size: >= 1124
Search String: HEX 002248780000A9AB6100012E
String Offset: =   86   FROM START

Please type in the search descriptions without any spaces.  As a guard against
incorrect entry, SAM 3.0 has a "Check" field in the definition screen.  If the
above information is entered correctly, your check field should be:  32BC

After you've entered the above information, click "Add" to add  the definition
to SAM.  This information should be added to the SAM User Definitions file
located in your System Folder.

STEP 2. Another set of update information needs to be entered via SAM Virus
Clinic to complete the process.  Start by selecting "Add Definition (Resource)"
from the Definitions menu.  Now enter the following information:

Virus Name:CODE 252
Resource Type: INIT
Resource ID:   = 34
Resource Size: >= 1124
Search String: HEX 002248780000A9AB6100012E
String Offset: =   86   FROM START

Please type in the search descriptions without any spaces.  As a guard against
incorrect entry, SAM 3.0 has a "Check" field in the definition screen.  If the
above information is entered correctly, your check field should be:  010D

After you've entered the above information, click "Add" to add the definition
to SAM.  This information should then be added to the SAM User Definitions file
located in your System Folder.  Next, you will see another dialog box
explaining that a virus definition with the same name already exists.  At this
point, you need to click the ADD button.  The CODE 252 update detection
instructions are now complete.

UPDATE REPAIR INSTRUCTIONS

Remember that entering the above user definitions into SAM Virus Clinic only
updates the detection capabilities of SAM.  For repair capabilities, users can
download the virus definitions file (available APRIL 17, 1992)  from the
Symantec Bulletin board at 408-973-9598, CompuServe, America Online or
Applelink.

If you don't own a modem and cannot download the virus definitions file, you
can receive a disk with repair capabilities for $12.00 (plus sales tax where
applicable).  To order, please call Customer Service at [phone] in the
US and in Canada.

----
This Information Provided in Cooperation with South Beach BBS [phone]