[comp.virus] JERUSALEM B again

C078D6S6@UBVM.BITNET (Thomas W. Stuart) (02/01/90)

A faculty member here at SUNY at Buffalo has been hit by the Jerusalem B
virus brought in on a commercially purchased program.  A blurb from the
publisher/distributor suggests scanning with either "sieve" or "scan54".
and eradicating with "M-Jerusalem".

Are any of these programs available from a bitnet or internet accessible
source?  And does this advice seem sound?

Please address any responses to me directly.

Thanking you in advance,
Thomas Stuart <c078d6s6 at ubvm>
School of Information and Library Studies
SUNY at Buffalo

brad@asuvax.eas.asu.edu (02/13/90)

Definitely sound advice! This virus will try to attach itself to any
exe,com,app,or ovl file you run once it is in memory ... and as such
has the tendency to propagate quite quickly. The latest SCANxx can
usually be found quickest on a local DOS based BBS (it is sharware )
and has CLEANUP which will eradicate the virus. There is also alot of
interesting documentation that comes with it. The only problem is that
this paticular flavor of virus can not always be removed without some
damage to the original file ... but a least it can be removed!

I would be interested in knowing what the commercial package was ...
we have seen a few minor breakouts here in Phoenix lately.

I'm just a wanna be UNIX guru (IJWBUG)               | Micro Maintenance, Inc.
						     | 2465 W. 12th St. #6
	   -== Brad Fisher ==- 		             | Tempe, Arizona  85281
     ...!asuvax!mcdphx!hrc!microm		     | 602/894-5526