AppleShare File Server and Virus Protection



What are your recommendations on virus protection for file servers?

Also, can a server be infected with the WDEF virus? If so, since WDEF is
spread by a machine coming in contact with an infected disk's Desktop file, how
is it spread? Does a server access a workstation's Desktop file?

Apple Tech Comm does not recommend using INITs that offer virus protection on
file servers. A server will freeze if a dialog appears alerting the
nonexistent user about an infection attempt. We suggest that instead you use a
program that scans the AppleShare File Server for viruses on a regular basis.

The AppleShare Server Folder itself is quite secure when the server is running.
Is it not accessible by any system call, whether high-level or low-level. A
virus can attack only folders and files for which the user of the infected
program has write access privileges. It is not necessary or recommended to
install Vaccine in the Server Folder on the AppleShare File Server. If the
server is running at the Finder level, it is just as susceptible to viruses as
any system.

An AppleShare file CAN become infected with the WDEF virus. When any new
volume is mounted, the WDEF virus looks for a file called "Desktop" at the root
level and copies itself into it. Once the file server is infected with the
WDEF virus, the virus is dormant because the Desktop file is not accessed by
workstations and is not used by the file server.


Published Date: Feb 18, 2012