frisk@rhi.hi.is (Fridrik Skulason) (11/30/89)
Some of the early variants of the Jerusalem virus are known to infect the same file over and over, but it was thought that no other virus did that. It seems, however, that the Cascade virus does this too, under certain conditions. One of the software companies here in Iceland called me today, asking for help in removing a virus which had invaded their network. It was obvious that something unusual was going on - COMMAND.COM was over 50K instead of the usual 25K or so. Examination revealed that programs on their Novell network server had been infected multiple times (up to 20 times) with the same virus (1704-B), but programs on diskettes and local hard disks had only been infected once. I just used a quick and dirty solution - ran my disinfection program 20 times, but I would like to know if anyone else has noticed this phenomena. - -frisk