T4-C virus has no trigger date. T4-C begins spreading immediately.

begins to spread to other files and attempts to alter the System file. The

not do anything before its trigger date. After the trigger date, the virus

1992, while the trigger date for T4-B is June 26, 1992. The virus does

difference is the trigger date. The trigger date for T4-A is August 15,

we call “T4-beta.” The strains are very similar. The only significant

1993), and a version which appears to have been used for testing which

2.0), T4-B (contained in GoMoku 2.1), T4-C (discovered in February,

There are four known strains of the T4 virus: T4-A (contained in GoMoku



   Application is infected with the T4 virus.



overt damage.  The virus may display the following message:

Once installed and active, the virus does not appear to perform any other



sometimes actually renames files “Disinfectant”.

is a good indication that T4 is attacking your system. The virus also

trying to make some change to a file, and if Disinfectant is not running, it

an alert from such an anti-viral tool telling you that “Disinfectant” is

general-purpose suspicious activity monitors like Gatekeeper. If you see

The virus masquerades as Disinfectant in an attempt to bypass



the T4 virus.

good reason, it is a good indication that you may have been attacked by

If your system suddenly stops loading INITs and system extensions for no



reinstall it.

the System file. If the virus damages your System file, you will have to

unpredictable circumstances. Disinfectant cannot repair this damage to

7.0.1, the change may render the system unbootable or cause crashes in

results in INIT files and system extensions not loading. Under System

under both Systems 6 and 7.  Under System 6 and System 7.0, the change

The change to the System file results in alterations to the startup code



   ### and replace it with a known good copy.

   ### be repaired properly. You should delete the file

   ### This file was damaged by the virus, and it cannot



Disinfectant issues the following error message:

file, but leaves the file damaged. You should not attempt to use such a file.

repair an infected application, Disinfectant removes the virus from the

application cannot be repaired. When you use Disinfectant to attempt to

When the virus infects an application, it damages it in such a way that the



to alter the System file.

The virus spreads to other applications and to the Finder. It also attempts



person’s name as a form of harassment.

the virus. The actual virus author is unknown, and probably used this

uninvolved person. Please do not use this person’s name in reference to

posting, and embedded in the game’s about box, is that of a completely

The game was distributed under a false name. The name used in the



anonymous FTP archive sites.

comp.binaries.mac and to a number of popular bulletin boards and

Copies of this game were posted to the USENET newsgroup

The virus was included in versions 2.0 and 2.1 of the game GoMoku.



June, 1992.

The T4 virus was discovered in several locations around the world in




xThe T4 Virus