high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing infected executable files.
More Information
Mac/Autostart-A is the first specific Power Macintosh worm and will not work on 68k Macintoshes. It uses the QuickTime AutoPlay feature to infect a Macintosh. If an infected disk is inserted, the worm adds an invisible file called "Desktop Print Spooler" to the Extensions folder. This should not be confused with the Macintosh System Extension called "Desktop Printer Spooler" in the same folder. The worm infects writable disks by placing the invisible file "DB" in the root folder and modifying the boot sector so that this file will be run when the disk is inserted. Mac/Autostart-A will overwrite data in files with the extensions .DATA, .COD, .CSA, .DAT.
This worm was first reported in May 1998.
|
