Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!rutgers!apple!usc!polyslo!vlsi3b15!vax1.cc.lehigh.edu!ubu.cc.lehigh.edu!virus-l
From: RKIENER@TRINCC.BITNET (Ron Kiener)
Newsgroups: comp.virus
Subject: More on the WordPerfect Virus [PC]
Message-ID: <0002.8906201731.AA26692@spot.CC.Lehigh.EDU>
Date: 17 Jun 89 04:00:00 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Reply-To: VIRUS-L@IBM1.CC.Lehigh.EDU
Lines: 42
Approved: virus-l@ubu.cc.lehigh.edu

I today received the following message from Israel concerning the reported
WordPerfect virus.  This letter is in response to the original VALERT
message which I passed on to friends in Israel.  The following message
includes instructions for using UNVIRUS.EXE.
Here is the message:

> Date: Fri, 16 Jun 89 19:22:01 IST
> From: Shlomo <BIDERMAN@TAUNIVM.BITNET>
> Subject: Virus
>
> Dear Ron,
> Yoav sent me your Virus-letters. I read it and had a good laugh:
> almost half of the pc users in our advanced country have encountered
> the described virus more than 6 months ago (I had it too!!). And a
> remedy was found by two wizards from Jerusalem. I am sending it
> to you. It is called UNVIRUS.EXE. This is what you should do:
>
> 1) Put it on a *floppy* (NOT on HD), together with Command.Com (i.e.,
> the DOS system)
> 2) Boot up your pc with the Diskette (Don't write-protect it, since
> UNVIRUS.EXE creates a temporary file while operating)
> 3) Type
>
> unvirus c:<cr>
>
> 4) And boom ... out went the virus!!
> The program is free of charge, as you can see in the introduction
> Bye.  Shlomo

Since I know nothing about viruses, and a bit about WordPerfect, I cannot
vouch for the UNVIRUS program.  I did decode it and run it according to
instructions, but since I do not have the virus, the UNVIRUS program
reported my hard drive was clean.  During operation, I noted that the
UNVIRUS program examined all subdirectories of my drive and quickly
flashed through all .EXE files.
In a separate file I am also posting the UNVIRUS.UUE file which I received
from my friend at Tel Aviv University, a user of WordPerfect 4.2.  He is
also not a virus "maven." I take no responsibility for the outcome of
UNVIRUS.EXE, but I do hope it solves this problem.

Ronald Kiener                                RKIENER@TRINCC.BITNET
Trinity College, Hartford, CT