[comp.virus] Info on Jerusalem Virus

sherk@umd5.umd.edu (Erik Sherk) (11/29/89)

Hi Virus Hunters,

	It has been a while since I worked on debrain and I have been
away from this list for some time, so I am a little out of date. Please
forgive me if this has been talked about recently.

	The University of Maryland has been hit by the Jerusalem
Virus. The McAfee programs SCANRES and VIRSCAN have been invaluable
in helping to detect the infection, but they don't help remove it.

	So what I am asking for is:

	1) Is there a Public Domain program that will remove
the virus from a machine?

	2) I would like a detailed description of this virus, i.e.
Is it a boot virus, where in RAM does it live, what INTs does it
steal...

	Please send any info to my mail address, as I don't have
the time to read this list regularly.

Thanx in advance...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Erik Sherk					sherk@umd5.umd.edu
Network Infrastructure				(301) 454-0864
Computer Science Center
University of Maryland

ajr@relay.EU.net (Julio Raposo) (12/04/89)

 I have dealt with a strike of Jerusalem's virus on a friend's PC and
succeded in producing a program to wipe out all viruses from the disk.
Since I claim no copyright over the code I will post it in a few days.

			Antonio Julio Raposo (ajr@inesc, LISBOA, PORTUGAL)

[Ed. The code, when posted, will be forwarded to the
VIRUS-L/comp.virus PC archive sites.]