Path: utzoo!utgpu!news-server.csri.toronto.edu!helios.physics.utoronto.ca!ists!yunexus!xrtll!silver From: silver@xrtll.uucp (Hi Ho Silver) Newsgroups: comp.sys.ibm.pc.misc Subject: Re: Virus Warning! Message-ID: <1990Dec22.194908.6748@xrtll.uucp> Date: 22 Dec 90 19:49:08 GMT References: Reply-To: silver@xrtll.UUCP (Hi Ho Silver) Organization: Not around here, pal! Lines: 24 In article hp0p+@andrew.cmu.edu (Hokkun Pang) writes: $I have a question on the Jeruselum (sp?) virus. I heard that it 's destructive $only when an illegal copy of a certain program is presented in the system, is $this right? I have cured two computers with this virus in a mattter of minutes. $The virus didn't seem to do any damage to the two computer even though the virus had lived quite a while. I've only run across one Jerusalem infection, though it was on several computers as it was spread across a network with poor security. I'm not a virus expert, so I don't know if this was the only Jerusalem strain or if others might be slightly different. There are many sources for virus information if you're interested - try looking in comp.virus, for example. It infected programs regardless of whether they were infected or not. Once a program had been infected a large number of times (I think somewhere in the 10-12 range), it would stop working properly (return to DOS without running or hang the machine, usually). I managed to get rid of it without harm to almost all of the files it had infected; McAfee's CLEAN, however, reported it was unable to remove it from two files (one was Lotus 1-2-3) and had to overwrite and delete them. -- __ __ _ | ...!nexus.yorku.edu!xrtll!silver | always (__ | | | | |_ |_) >----------------------------------< searching __) | |_ \/ |__ | \ | if you don't like my posts, type | for _____________________/ find / -print|xargs cat|compress | SNTF