[comp.virus] JUDE Virus

C0195@UNIVSCVM.BITNET (Gregory E. Gilbert) (11/28/89)

I saw a posting on VALERT-L stating that a new virus has been found
called the JUDE virus.  Does anyone have any information beyond what
was reported on VALERT-L?  Has this been CONFIRMED to be a virus?
Thanks much.

Greg

Postal address:   Gregory E. Gilbert
                  Computer Services Division
                  University of South Carolina
                  Columbia, South Carolina   USA   29208
                  (803) 777-6015
Acknowledge-To: <C0195@UNIVSCVM>

dmg@lid.mitre.org (David Gursky) (12/03/89)

There's not much to say about it so far.  It is apparently sufficently
different from other nVIR clones so that older versions of
Disinfectant will not catch it (there is allegedly a Disinfectant 1.3
that will catch it though) but not so different that Virus Detective
will not catch it.

Of course, Virus Detective has the advantage that it will allow the
user to add new search strings for new viruses as they are found.

muellerm@inf.ethz.ch (12/05/89)

Yes the "Jude" virus is for real. However, so far it only has shown up
at the University of Zurich and Swiss Federal Institute of Technology
(ETH) Zurich, Switzerland. It is an exact clone of nVIR type B; the
only difference being the name of the viral resource which has changed
form "nVIR" to "Jude".

VirusDetective 3.1 positively identifies the new virus as nVIR strain.
Both Vaccine and GateKeeper successfully prevent an infection.
GateKeeper will, however, let through some of the "Jude" resources,
but no contagious infection results.

New versions of Disinfectant (version 1.3) and other anti-viral tools
should be out real soon.

   Markus Mueller
   Institut fuer technische Informatik und Kommunikationsnetze
   Eidgenoessische Technische Hochschule
   CH-8092 Zurich
   Switzerland

   Switch : muellerm@inf.ethz.ch
   ARPA   : muellerm%inf.ethz.ch@relay.cs.net
   UUCP   : muellerm%inf.ethz.ch@cernvax.uucp
   X.400  : G=markus;S=mueller;OU=inf;O=ethz;P=ethz;A=arcom;C=ch