[comp.virus] SAM 2 & ZUC B

D1660@AppleLink.Apple.COM (SoftPlus, Paul Cozza,PRT) (11/26/90)

For SAM 2.0 Users:

A new strain of the Macintosh virus ZUC has appeared in Italy. It is
very similar to the first strain of ZUC in its behaviour. It modifies
CODE resources in applications. In standard, advanced or custom mode,
SAM 2 will alert you too this virus's attempt to change CODE
resources. Denying these attempts prevents the virus from spreading.
You can enter the following virus definition with Virus Clinic to
detect this virus by name.

   Virus Name:   ZUC B     (or ZUC 2)

Resource Type:   CODE
  Resource ID:   1
Resource Size:   Any
Search String:   7002A2604E752014A0552240      (hexadecimal)
Search Offset:   Any

Paul Cozza
SAM Author