[comp.virus] Info wanted on Plastique

cctb@hippo.ru.ac.za (Tim Bouwer) (04/26/91)

Hi

We have been infected with the Plastique virus and the Jerusalem virus
as reported by McAfee's SCAN program (Ver74).

The virus infected files on our Novell 386 server and was inhibited in
it's spread by a program we use which prohibits users from running
files that have been modified in any way.

We have some people working on disassembling the code, but have become
concerned that we are in for more trouble from it before this is
complete.

Could any kind soul send us some more info on this - an anonymous FTP
site, or some live info that you may have gathered.

Thanks

Tim

- --
| Tim Bouwer   Computing Centre          Tel: 27 [0]461 22023 ext 288 |
| Rhodes University Grahamstown          FAX: 27 [0]461 25049         |
|      6140  South Africa                Internet: cctb@hippo.ru.ac.za|
- -----------------------------------------------------------------------