Msg #105680 in *EchoMac* Created on 12/07/89 at 20:49:51
To: All, From: Jim Macak
Subject: New Mac Virus - WDEF
Here is an warning announcement from John Norstad, author of Disinfectant, about a newly discovered Mac virus - WDEF. Norstad and the MacMASH anti-virus group are currently investigating the workings of the virus and updates to anti-viral utilities should be out soon. Meanwhile, as noted below, you can configure the Virus Detective DA yourself to fight the virus...
Jim Macak
New WDEF Virus
==============
December 6, 1989
A new Macintosh virus named "WDEF" has been discovered in Belgium, at Northwestern University, and at the University of Texas.
The WDEF virus infects the invisible "Desktop" files used by the Finder. Every Macintosh disk has one of these files (hard drives and floppies). The virus spreads from Desktop file to Desktop file, but it does not infect applications, data files, or system files.
The virus does not intentionally try to do any damage. In fact, it doesn't do anything except spread from disk to disk. Due to a bug, the virus causes Mac IIcis to crash. We have also noticed unusually frequent crashes on infected Mac IIcxs, and severe performance problems with infected AppleShare servers. There are also other bugs in the virus which could cause problems.
You do not have to run a program for the virus to spread.
Unlike most of the other Mac viruses, the WDEF virus is not spread via the sharing and distribution of programs, but rather via the sharing and distribution of disks, usually floppy disks. You can eliminate the virus from a disk by rebuilding the desktop file (hold the option and Command keys while restarting the Macintosh).
Unfortunately, the virus manages to avoid detection by all of the popular protection INITs, including Vaccine 1.0.1, GateKeeper 1.1.1, SAM Intercept 1.10, and Virex INIT 1.12.
Disinfectant 1.3, Virus Rx 1.5, SAM Virus Clinic 1.10, and Virex 2.12 also all fail to detect the virus. We expect that many of the virus-fighting programs mentioned above will be updated soon to deal properly with the new WDEF virus.