Article View: comp.virus
Article #5297Israeli virus strains vs. Novell? (PC)
From: RZOTTO%DKNKURZ1.BITNET
Date: Thu, 22 Feb 1990 15:15
Date: Thu, 22 Feb 1990 15:15
25 lines
1501 bytes
1501 bytes
Good evening,
recently, a user of a Novell Network consulted me about my (ancient,
even obnsolete, yet popular) VIRCHECK program, which had rendered his
network hanging. He declared, that Novell uses Int 21, Function E0,
for its internal gearings -- the very same function the "Friday 13th"
virus uses for its signalling. My VIRCHECK will check for the
presence of TSR "Friday 13th" by invoking this function and looking at
the answer.
Now I conjecture, that
** the "Friday 13th" will cause Novell Networks to hang every time an
infected program is invoked;
** so will probably other Israeli strains do (Y.R. forgive me: I don't
know any other, widely recognized, term for them :-) ;
** IMMUNE and similar virus-watchers will probably suspect Novell
of being a virus, and alert the user about it;
** VIRCHECK and similar virus-checkers will cause Novell to hang,
as well.
Has anybody any experiences to share with us, in this respect?
(I, for my part, have no Novell running to test my conjectures.)
Best wishes
Otto Stolz
Technical Details
Message-ID:
<0012.9002221232.AA07723@ge.sei.cmu.edu>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvwShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: RZOTTO%DKNKURZ1.BITNET@CUNYVM.CUNY.EDU Newsgroups: comp.virus Subject: Israeli virus strains vs. Novell? (PC) Message-ID: <0012.9002221232.AA07723@ge.sei.cmu.edu> Date: 22 Feb 90 15:15:43 GMT Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU> Lines: 25 Approved: krvw@sei.cmu.edu