"MDEF D" Virus (10-Aug-1991)
Entry...............: "MDEF D" Virus
Alias(es)...........: ---
Virus Strain........: MDEF Virus Strain                                        
Virus detected when.: May 1990            
              where.: New York, USA
Classification......: Link virus
Length of Virus.....:  Bytes
--------------------- Preconditions ----------------------------------
Operating System(s).: MacOS proprietary             
Version/Release.....: All                     
Computer model(s)...: Apple Macintosh: all models
--------------------- Attributes -------------------------------------
Easy Identification.: MDEF Resource with ID 8375
Resource pattern....: MDEF Resource ID 8375
Type of infection...: Adding an MDEF resource and changing a MENU 
                         resource.
Infection trigger...: Executing an infected file. This virus searches
                         (via GetCatInfo) for the first file of type 
                         "APPL" that has no MDEF ID 8375 and infects it
Applications affected:All of type "APPL"
Traps intercepted...: none
Damage..............: none
Damage Trigger......: none
Peculiarities.......: ---
Similarities........: MDEF A,B,C viruses
--------------------- Agents -----------------------------------------
Countermeasures/direct: Removal of MDEF resource ID 8375. Change 
                         2 bytes at offset 6 in MENU 1 resource
                         from $20B7 to 0. 
Countermeasures/software:Use an anti-viral product (public domain or
                         commercial) such Disinfectant, Interferon,
                         Virus detective or VirusRx to scan for virus
                         signature.
--------------------- Acknowledgement --------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Ronald Greinke
Documentation by....: Ronald Greinke
Date................: 10-August-1991
Information Source..: ---

.