Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: RZOTTO%DKNKURZ1.BITNET@CUNYVM.CUNY.EDU
Newsgroups: comp.virus
Subject: Israeli virus strains vs. Novell? (PC)
Message-ID: <0012.9002221232.AA07723@ge.sei.cmu.edu>
Date: 22 Feb 90 15:15:43 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 25
Approved: krvw@sei.cmu.edu

Good evening,

recently, a user of a Novell Network consulted me about my (ancient,
even obnsolete, yet popular) VIRCHECK program, which had rendered his
network hanging.  He declared, that Novell uses Int 21, Function E0,
for its internal gearings -- the very same function the "Friday 13th"
virus uses for its signalling.  My VIRCHECK will check for the
presence of TSR "Friday 13th" by invoking this function and looking at
the answer.

Now I conjecture, that
** the "Friday 13th" will cause Novell Networks to hang every time an
   infected program is invoked;
** so will probably other Israeli strains do (Y.R. forgive me: I don't
   know any other, widely recognized, term for them :-) ;
** IMMUNE and similar virus-watchers will probably suspect Novell
   of being a virus, and alert the user about it;
** VIRCHECK and similar virus-checkers will cause Novell to hang,
   as well.

Has anybody any experiences to share with us, in this respect?
(I, for my part, have no Novell running to test my conjectures.)

Best wishes
            Otto Stolz