[comp.virus] U.S. sighting of ZUC B

XMU@CORNELLA.cit.cornell.edu (Tom Young) (12/08/90)

ZUC B has been detected on the Cornell campus.  The vector was a
student who had just returned from Italy, where ZUC seems to have
originated.  An alert operator in one of our public facilities was
checking a diskette, and the patron mentioned having been in Italy.
Our person scanned with his freshly downloaded Disinfectant 2.4 and up
popped ZUC B.  So, we may have nipped this one in the bud.  All the
same, this serves as a cautionary tale: Keep your virus-fighting
software up-to-date, even if the newest version is just for an obscure
or foreign virus.

Note that Disinfectant 2.4, released Dec 3, is needed to detect ZUC B.
Version 2.3 will not find this virus.

Tom Young, Cornell Information Technologies, Workstation Systems Services
Bitnet: XMU@CORNELLA               Internet: xmu@cornella.cit.cornell.edu