LIZBB%CUNYVM.BITNET@VMA.CC.CMU.EDU (Elizabeth Caruso) (10/17/89)
Today, our Novell LAN reported a hardware error when users tried to access programs stored on our File Server. At first we did not know it was a virus because the same programs would run for one user and not run for another. I had a feeling it might be a virus when I performed a Novell Netware command "NCOPY" and the screen messages where overwritten by characters that did not make sense. We decided to run "VIRSCAN" to check for viruses. 39 files where infected with the JERUSALEM virus including the "NCOPY" file. HAS ANYONE ENCOUNTERED THE JERUSALEM VIRUS ON THEIR LOCAL AREA NETWORKS? We would like to delete the infected files and replace them with clean copies but we don't know if this will be a correct action to take. Will recoping be enough or do we have to format our File Server? IF ANYONE HAS DELETED JERUSALEM FROM THEIR SYSTEM, (LAN OR PC SYSTEM) WE WOULD LOVE SOME ADVICE!!!! HOW DOES THIS VIRUS INFECT A SYSTEM AND SPREAD?