Hi there.  Thanks for all the info.

The virus is : OF97/Tristate-C

We are running a G4 on 9.2.2.  Theoretically we could upgrade to osX, but we
will be getting new machines in the next couple of months, and our current
main system (filemaker 4.1) obviously won't work on osX, as I think the
current one is filemaker 9.  So we just need to make these machines limp
along for a couple more months until our new database system for filemaker 9
is written.  My main worry, as this is apparently a 'low threat virus' and
isn't really affecting us, but when I send a word doc to someone it is
either erased, or says it has a virus.

As I was going to do some work from home and needed to take files from the
affected machine, I didn't want to infect my brand new mac book pro!  So I
was just trying to see whether I could kill the virus on these machines
before moving any files.  I suppose once they are on my mac book pro they
can be killed, but I hate the thought of deliberately introducing a virus to
my lovely new machine.

It sounds like it is not going to be possible in any easy sort of way.

Thanks again, or for any further suggestions.

Julie

> From: Tom Shaw <ts...@oitc.com>
> Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
> Date: Mon, 22 Jun 2009 21:34:34 -0400
> To: ClamAV users ML <clamav-users@lists.clamav.net>
> Subject: Re: [Clamav-users] question about Clamav anti virus for old mac OS
> 9.2
> 
> At 8:04 PM -0400 6/22/09, John Jasen wrote:
>> Tom Shaw wrote:
>> 
>>> You could copy your MS Word files to an OSX machine and check them.
>>> You could search on eBay for an old AV program that worked on OS 8/9.
>>> You could email the suspect file(s) to virustotal so check them. Or
>>> you could turn off Macros in Word and copy the contents to new files.
>> 
>> Take the disks out, put them in a computer that can run from a linux
>> live cd, hope it has HFS support, and go from there?
> 
> Well if the OS 8/9 machines' have ethernet I'd just ftp to any
> machine that has and AV system. If the files are small, copy to
> floppy and then xfer them. If you have an OSX 10.2, I think, you can
> remotely mount a OS 8/9 machine but I believe that the capability was
> deprecated in later OSX versions.
> 
> Unfortunately there is not enough data on the person's config, amount
> of files, what made them all of a sudden think they have a macro
> virus in such an old version of word, etc.
> 
> Tom
> -- 
> Tom Shaw - Chief Engineer, OITC
> <tshaw at oitc.com>, http://www.oitc.com/ local wx:
> http://www.oitc.com/weather
> US Phone Numbers: 321-984-3714, 321-729-6258(fax),
> 321-258-2475(cell/voice mail,pager)
> Text Paging: http://www.oitc.com/Pager/sendmessage.html
> AIM/iChat: trs...@mac.com
> 
> Fish more and Live longer
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
> 

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to