Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: jesse%altos86.Altos.COM@vicom.com (Acer - Jesse Chisholm) Newsgroups: comp.virus Subject: Re: Do any viruses affect Novell? (PC) Message-ID: <0007.9104191405.AA11080@ubu.cert.sei.cmu.edu> Date: 19 Apr 91 00:32:17 GMT Sender: Virus Discussion List Lines: 31 Approved: krvw@sei.cmu.edu |dweissman@amarna.gsfc.nasa.gov (WiseGuy) writes: |> What viruses (if any) affect Novell local area networks? Any DOS |> virus? Over a broadband/ethernet LAN? About 1.5 years ago, our NOVELL network was infected with Jerusalem-B. What happened was MicroSoft-Word needs to be writable because it can reconfigure itself for some user options. What we think happened is the supervisor ran MSW from a workstation that was infected. From MSW the whole company was soon infected. Since MSW remained writable to itself, it infected itself 70 someodd times. The infection was not detected until a TSR that was being developed in the R&D department started showing eratic behavior. It worked fine the first time it was compiled and run, but never again. Because of this, and the three weeks it took to clean house, our MIS department purchased a battery of protection programs and scanning programs. We have had no network infections since. We have been infected by Stoned, Jerusalem-B, Disk-Killer at various times since then, but only on a limited number of workstations before it was detected and cleaned. We have a problem trying to keep suspect floppies out of our system, since the Taiwan office is always sending floppies to us and not everyone knows about viral protection. Its an uphill battle, but so far we are winning. - -- Jesse Chisholm | "I've UNDERSTOOD IT! Well, that is, ..., jesse@Altos86.Altos.COM | I'm not exactly sure WHAT I've understood, Tel 1-408-432-6200x4810 | but I have the impression I've understood Fax 1-408-434-0273 | SOMETHING." -- Anselm Lanturlu