Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!ubu.cc.lehigh.edu!virus-l From: d85-ben@sm.luth.se (Johan Bengtsson) Newsgroups: comp.virus Subject: Re: Your assistance please... Message-ID: <0002.8906091203.AA01152@ubu.CC.Lehigh.EDU> Date: 8 Jun 89 20:21:25 GMT Sender: Virus Discussion List Reply-To: VIRUS-L@IBM1.CC.Lehigh.EDU Lines: 39 Approved: virus-l@ubu.cc.lehigh.edu Name of Virus: Israeli Virus (I belive) Computers/OS: Does run on IBM compatibles with DOS operating system. (though not when using the Novell network, interupt conflict) Virus activity: After infection, every program run received a copy of the virus. One type of executables (EXE files) were infected many times. This led to the eventual discovery of the virus. The sick systems did have a "symptom"; about two times each hour a small part of the screen was blanked out. Each Friday 13th, after an initial delay of about 30 min, *every* program run was *deleted*. This did not happen to us, countermeasures were applied in time. Countermeasures:A "vaccine" was developed by me, after disassembly of the virus code. This detected and prevented further infections. An "antidote" program was developed by the Comp. Dep. which was able to restore most infected programs. Later, we discovered that a "vaccine" and "antidote" had already been developed at an Israeli University. Place of events:University of Lulea, Sweden, October 1988 My name: Johan Bengtsson, at the time a last year student in Comp. Sc. Good luck with the book! - --BEN - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Johan Bengtsson University of Lulea, SWEDEN Forskarvagen 149B S-951 63 LULEA Domain: d85-ben@luth.se SWEDEN Path: mcvax!enea!luth.se!d85-ben - - - - - - - - - - - - - - - - - - - - - - - - - - - - -