Hi there. Thanks for all the info. The virus is : OF97/Tristate-C
We are running a G4 on 9.2.2. Theoretically we could upgrade to osX, but we will be getting new machines in the next couple of months, and our current main system (filemaker 4.1) obviously won't work on osX, as I think the current one is filemaker 9. So we just need to make these machines limp along for a couple more months until our new database system for filemaker 9 is written. My main worry, as this is apparently a 'low threat virus' and isn't really affecting us, but when I send a word doc to someone it is either erased, or says it has a virus. As I was going to do some work from home and needed to take files from the affected machine, I didn't want to infect my brand new mac book pro! So I was just trying to see whether I could kill the virus on these machines before moving any files. I suppose once they are on my mac book pro they can be killed, but I hate the thought of deliberately introducing a virus to my lovely new machine. It sounds like it is not going to be possible in any easy sort of way. Thanks again, or for any further suggestions. Julie > From: Tom Shaw <ts...@oitc.com> > Reply-To: ClamAV users ML <clamav-users@lists.clamav.net> > Date: Mon, 22 Jun 2009 21:34:34 -0400 > To: ClamAV users ML <clamav-users@lists.clamav.net> > Subject: Re: [Clamav-users] question about Clamav anti virus for old mac OS > 9.2 > > At 8:04 PM -0400 6/22/09, John Jasen wrote: >> Tom Shaw wrote: >> >>> You could copy your MS Word files to an OSX machine and check them. >>> You could search on eBay for an old AV program that worked on OS 8/9. >>> You could email the suspect file(s) to virustotal so check them. Or >>> you could turn off Macros in Word and copy the contents to new files. >> >> Take the disks out, put them in a computer that can run from a linux >> live cd, hope it has HFS support, and go from there? > > Well if the OS 8/9 machines' have ethernet I'd just ftp to any > machine that has and AV system. If the files are small, copy to > floppy and then xfer them. If you have an OSX 10.2, I think, you can > remotely mount a OS 8/9 machine but I believe that the capability was > deprecated in later OSX versions. > > Unfortunately there is not enough data on the person's config, amount > of files, what made them all of a sudden think they have a macro > virus in such an old version of word, etc. > > Tom > -- > Tom Shaw - Chief Engineer, OITC > <tshaw at oitc.com>, http://www.oitc.com/ local wx: > http://www.oitc.com/weather > US Phone Numbers: 321-984-3714, 321-729-6258(fax), > 321-258-2475(cell/voice mail,pager) > Text Paging: http://www.oitc.com/Pager/sendmessage.html > AIM/iChat: trs...@mac.com > > Fish more and Live longer > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml