Return-Path: XPUM04@prime-a.central-services.umist.ac.uk Received: from G.SEI.CMU.EDU by ubu.cert.sei.cmu.edu (5.61/2.3) id AA03421; Tue, 19 Jun 90 05:00:23 -0400 Received: from SEI.CMU.EDU by g.sei.cmu.edu (5.61/2.5) id AA28340; Tue, 19 Jun 90 05:00:18 -0400 Received: from nsfnet-relay.ac.uk by sei.cmu.edu (5.61/2.3) id AA01289; Tue, 19 Jun 90 05:00:13 -0400 Received: from sun.nsfnet-relay.ac.uk by vax.NSFnet-Relay.AC.UK via Janet with NIFTP id aa04651; 19 Jun 90 9:24 BST From: Anthony Appleyard To: DAVIDF@cs.heriot-watt.ac.uk Date: Tue, 19 Jun 90 09:38:24 BST Message-Id: <$TGWFCWKBBCTB at UMPA> Subject: Here is Virus-L vol 0 #0904 Virus-L Digest Sun, 4 Sep 88, Volume 0 : Issue #0904 Today's Topics Re: MS-DOS: new strain of virus? ------------------------------ Date: Sun, 4 Sep 88 17:05:04 +0200 From: "Y. Radai" Subject: Re: MS-DOS: new strain of virus? Otto, The virus you describe seems to be similar, in general terms, to the Israeli virus (which was described in VIRUS-L several months ago), although the details seem to be slightly different. I'm sending you a separate file containing a program IMMUNE (in uuencoded form). Execute that, and if your virus is similar enough to ours (captures int 21h to control program execution), IMMUNE should prevent future infection and warn you each time an attempt is made. If you want further help, send me a copy of a small COM file and a small EXE file which are infected by your virus (actual programs, please; no psuedos). If all goes well, we'll be able to modify our program for removing the virused portion of infected files so that it works on your virus too, avoiding the need for you to perform the re-installation procedure you described. Y. Radai, Hebrew Univ. of Jerusalem -------------------- *** end of Virus-L issue ***