Path: utzoo!utgpu!watserv1!watmath!att!att!linac!pacific.mps.ohio-state.edu!zaphod.mps.ohio-state.edu!ub!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: Michael_Kessler.Hum@mailgate.sfsu.edu Newsgroups: comp.virus Subject: WordPerfect and Jerusalem B virus (PC) Message-ID: <0010.9011011437.AA08158@ubu.cert.sei.cmu.edu> Date: 31 Oct 90 20:28:00 GMT Sender: Virus Discussion List Lines: 10 Approved: krvw@sei.cmu.edu We have been infected with a Jerusalem B virus, and apparently have gotten rid of it. However, 5 minutes later, we get a phone call from a network user (always the same) having problems with Word Perfect (lines doubling themselves and hiding the line under. We checked their hard disk, we checked the WP directory, I took down the network and ran a check on all the partitions. Nothing. And then WordPerfect starts acting up. We can't figure out if now we are dealing with a bug in WordPerfect or with a virus we can't detect. Clearly WP.EXE needs to be reinstalled once infected. Is this true of *.FIL files? Any suggestions?