Did she only publish the source code or the executable?
Because here is where I'm confussed (sorry for being stupid) but if she was to publish an executable on her website then wouldn't that be classified as releasing them as they are out for grabs to the public and just waiting to be set free. So therefore wouldn't her only case be if she had only published the source code for the virus under a strick "for educational purposes only" rule.