This article is from the Viruses and the Mac FAQ, by David Harley D.Harley@icrf.icnet.uk with numerous contributions by others.
For other freeware\shareware Mac packages, try Info-Mac mirrors
The University of Texas holds some older documentation on Mac
Tracker INIT and DelProtect INIT, both by Ioannis Galidakis, were
first released on 19-Nov-98. Tracker is a behavior blocker something
like the retired program GateKeeper. DelProtect protects against
malicious file deletion. Tracker is now at version 1.1. Scanner 1.1x
also by Ioannis Galidakis was released 15-Jan-99, and is a free,
generic, heuristic 68k virus scanner for advanced Macintosh users.
John Dalgliesh has created Agax, an extensible, free anti-virus
program which replaces his program AntiGax, and uses plug-ins called
"Additives." At this time, Agax will detect and try to clean only
SevenDust, CODE 9811, and the AutoStart worms (the worm additive was
in beta testing at the time of this writing). The author's Web page
and documentation invite Mac programmers to contribute additives.
The Exorcist, free from Laffey Computer Imaging, may give some (by
one description, about 90%) protection from the SevenDust family.
Gatekeeper was not a scanner, but a generic tool. It is no longer
supported by its author, but is still available on some sites. It
is probably not safe to use or rely on on modern systems, and I
believe the author recommends that people don't attempt to use it,
though I've been unable to contact him to get confirmation.
In January 1997 Padgett Peterson, author of the PC utility
DiskSecure, released the first version of his MacroList macro
detection tool, which has been tested by the author on Macs (System
7.5 on SE/30, IIci and PowerMac) as well as Windows PCs, using
considerably more macro viruses than Microsoft seem to have heard
of..... The MacroList template is accessed by a button in the
standard toolbar. This is not a virus scanner, but allows disabling
of automacros, listing of any macros found in the current document
etc. Version 1.10 was due for release by the time of writing
(February 1997), and an adaptation for Office97 is in progress.
Watch the Web page for further details. [v1.1 and the Office 97
"late beta" were available as at 18th March 1997.] MacroList is
freeware, but please be sure to read the TRIALS link.
(under Anti-Virus Hobby) - NB change of URL.
WormGuard by Clarence Locke is a free on-access extension that
affords AutoStart worm protection:
The following free scanners may remove AutoStart 9805 and its B, C,
D, E, and F variants and may be useful in the absence of a
commercial application. There are a few reported instances of
failures by some of these programs to identify or remove the
AutoStart worms, and it is likely that D might be mis-identified as
C, and E may be mis-identified as the original worm. [SL]
WormScanner by James Walker
Autostart Hunter by Akira Nagata
BugScan by Mountain Ridge Dataworks (also detects SevenDust E)
Worm Gobbler by Jim Kreinbrink
Innoculator by MacOffice
WormFood by Doug Baer
Eradicator with update, by Uptown Solutions Ltd.
As stated above, one-shot solutions to a very small subset of a
particular class of threat have a long and honourable history, and
are very welcome when a new threat catches the antivirus developers
on the hop (it can take some time to incorporate detection of new
threats into the product update cycle). NB The maintainer does not
currently have the time or resources to do full detection testing of
these products (or any other). [DH]