🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.virus
Article #4674

CLEAN removing Jerusalem (Was: Re: Jerusalem (Israeli) Virus (PC))

#4674
From: McAfee Associates
Date: Thu, 14 Jan 1993 18:17
29 lines
1665 bytes
Hello Vesselin,

You write:

>Due to the infection method that this virus employs, it destroys EXE
>files with internal overlay structure (e.g., WordPerfect). Such files
>will crash when executed. They will still crash after disinfection,
>although McAfee's Clean does not warn you about that. If you have an
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>outbreak of this virus, the best solution is to delete all infected
>files and to replace them with clean copies.

CLEAN-UP does have a limited ability to check a Jerusalem virus
infected file and warn the user that the virus can not safely be
removed.  It will then ask the user if he (or she) wants to
overwrite-and-delete the file instead.

Regards,

Aryeh Goretsky
McAfee Associates Technical Support

- -- 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
McAfee Associates, Inc.  | Voice (408) 988-3832 | INTERNET:
3350 Scott Blvd, Bldg 14 | FAX   (408) 970-9727 | mcafee@netcom.COM
Santa Clara, California  | BBS   (408) 988-4004 | CompuServe ID: 76702,1714
95054-3107  USA          | USR HST Courier DS   | or GO MCAFEE
Support for SENTRY/SCAN/NETSCAN/VSHIELD/CLEAN/WSCAN/NETSHIELD/TARGET/CONFIG MGR
Technical Details
Message-ID: <0016.9301221631.AA12947@barnabas.cert.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!news.sei.cmu.edu!cert!netnews.upenn.edu!netnews.cc.lehigh.edu!news
From: mcafee@netcom.com (McAfee Associates)
Newsgroups: comp.virus
Subject: CLEAN removing Jerusalem (Was: Re: Jerusalem (Israeli) Virus (PC))
Message-ID: <0016.9301221631.AA12947@barnabas.cert.org>
Date: 14 Jan 93 18:17:09 GMT
Sender: virus-l@lehigh.edu
Lines: 29
Approved: news@netnews.cc.lehigh.edu