Re: Jerusalem varient which crashes a novell network? (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Vesselin Bontchev Tue, 15 Dec 1992 12:26

#4325

Author: Vesselin Bontchev
Date: Tue, 15 Dec 1992 12:26

25 lines
1538 bytes

dab6@po.CWRU.Edu (Douglas A. Bell) writes:

> Recently at CWRU we had files on a novell 3.11 server get infected 
> with a varient of the Jerusalem virus.

> What is strange was that if a user ran an infected file on the network,
> it would crash the file server.

> Has anyone seen this kind of behavior before?

Yes, the standard Jerusalem (huh? what standard? Well, I mean
Jerusalem.1808.Standard <grin>) always crashes the network, because of
some conflicts between the undocumented DOS function calls that it
installs and uses for "Are you there?" questions and memory
installation. At least, it has always crashed in our tests. There are
variants of it that are using other undocumented function calls, that
do not cause a conflict.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads