found some viri in ancient apps

in this this post

http://http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/does-sophos-actually-detect-any-mac-viri-or-threats/td-p/497

i asked if sophos detects old mac viruses

well it appears to find some

i found nvir in a couple of old apps on my boot drive

unfortunately the only repair option offered is discard and get new, not so easy with ancient apps

fortunately after a heck of a lot of googling i found replacements

nevertheless i also set about repairing the files manually

i inspected the the resource forks with rezilla

one file had a code 256 resource of 422 bytes a leftover from an incomplete repair with virusbarrier

the other had the full virus, although an inspection of the code 0 and nvir 2 resources showed it had naver been activated

i removed the bad guys and saved the files

i then ran sophos on the replacement files and inspected them with rezilla as well

they were virus free

then i compared the repaired files with the replacemeents

they were identical

it would be nice if sophos offered a file repair function or at least a library of how to nfo for self repair

getting replacements for ancient files is getting harder every day

btw

i also scanned the infected files with clamav [latest] and virusbarrier 5 [outdated]

both files came up clean

clamav has never flagged a classic mac virus

vb5 does, but apparently only when it considers the villain complete or active

thanx