"MDEF A" Virus (15-July-1991)
Entry...............: "MDEF" A Virus
Alias(es)...........: "Garfield" Virus
Virus Strain........: MDEF Virus Strain                                        
Virus detected when.: May 1990            
              where.: New York, USA
Classification......: Link virus
Length of Virus.....: 314 Bytes
--------------------- Preconditions ----------------------------------
Operating System(s).: MacOS proprietary             
Version/Release.....: System 4.1 or greater                     
Computer model(s)...: Apple Macintosh: all models
--------------------- Attributes -------------------------------------
Easy Identification.: MDEF Resource with ID 3842 in System file 
                      MDEF Resource named "Garfield"
Resource pattern....: MDEF Resource named "Garfield"
Type of infection...: Adding (and renaming) a MDEF resource
Infection trigger...: Executing an infected file.
Applications affected:All + System
Traps intercepted...: ---
Damage..............: ---
Damage Trigger......: ---
Peculiarities.......: If SAM Intercept is present, it will allow 
                         changing the ID of MDEF 0 to 3842 but will 
                         prevent the addition of the MDEF "Garfield" 
                         resource; this causes the computer to hang 
                         if a menu item is clicked.
Similarities........: MDEF variants
--------------------- Agents -----------------------------------------
Countermeasures/direct:1) System: Removal of MDEF resource named 
                         "Garfield" and changing the ID of MDEF 3842
                         back to 0 with ResEdit.
                      2) Applications: Remove MDEF 0 "Garfield" 
                         resource.
Countermeasures/software: Use a commercial anti-viral product or a 
                         public domain utility such as Virus detective, 
                         VirusRx, Interferon or Disinfectant to scan
                         for virus signatures.
--------------------- Acknowledgement --------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Ronald Greinke
Documentation by....: Ronald Greinke
Date................: 15-July-1991
Information Source..: ---

.