high
Summary
Summary
More Information
| Detected by | All Sophos products |
|---|---|
More Information
- Summary
- More Information
Mac/Autostart-A is the first specific Power Macintosh worm and will not work on 68k Macintoshes. It uses the QuickTime AutoPlay feature to infect a Macintosh. If an infected disk is inserted, the worm adds an invisible file called "Desktop Print Spooler" to the Extensions folder. This should not be confused with the Macintosh System Extension called "Desktop Printer Spooler" in the same folder. The worm infects writable disks by placing the invisible file "DB" in the root folder and modifying the boot sector so that this file will be run when the disk is inserted. Mac/Autostart-A will overwrite data in files with the extensions .DATA, .COD, .CSA, .DAT.
This worm was first reported in May 1998.
|
