Return-Path: XPUM04@prime-a.central-services.umist.ac.uk
Received: from G.SEI.CMU.EDU by ubu.cert.sei.cmu.edu (5.61/2.3)
        id AA21307; Thu, 7 Jun 90 13:37:35 -0400
Received: from SEI.CMU.EDU by g.sei.cmu.edu (5.61/2.5)
        id AA14014; Thu, 7 Jun 90 13:37:34 -0400
Received: from nsfnet-relay.ac.uk by sei.cmu.edu (5.61/2.3)
        id AA01535; Thu, 7 Jun 90 13:37:25 -0400
Received: from sun.nsfnet-relay.ac.uk by vax.NSFnet-Relay.AC.UK 
           via Janet with NIFTP  id aa21411; 7 Jun 90 17:42 BST
From: Anthony Appleyard <XPUM04@prime-a.central-services.umist.ac.uk>
To: DAVIDF@cs.heriot-watt.ac.uk
Date:         Thu, 07 Jun 90 15:32:36 BST 
Message-Id:   <$TGVGDBVHFKTX at UMPA>
Subject:      Virus-L vol 0 issue #0711



Virus-L Digest Mon, 11 Jul 88, Volume 0 : Issue #0711

Today's Topics

Question about virus simulator
New version of PKARC on-line
possible virus?

------------------------------

Date:         Mon, 11 Jul 88 09:49:04 EDT
Reply-To:     Virus Discussion List <VIRUS-L@LEHIIBM1>
Sender:       Virus Discussion List <VIRUS-L@LEHIIBM1>
From:         "Kenneth R. van Wyk" <LUKEN@LEHIIBM1>
Subject:      Question about virus simulator

As mentioned here some time back, the National Bulletin Board Society has a
product called a  virus  simulator.  They  also,  by  the  way,  market  an
anti-virus program, but its name escapes me at the moment. Does anyone have
any  experience with their virus simulator that you could relate to VIRUS-L
readers? It's supposed to test an anti-virus package against  most  of  the
current  known  virus  infiltration  methods.  I've  heard some conflicting
messages about its usefulness, though. For example, it is alleged  to  come
up  with  erroneous  reports against some of the current crop of anti-virus
products by reporting that a particular virus would be able to  infect  the
system,  when  the  opposite  has  been  proven  to  be  true.  It would be
interesting to hear some independent evaluation(s)  of  this  product.  Any
comments on this sort of testing scheme?

Ken

Kenneth R. van Wyk                    Hobbes: Wow, buried treasure right
User Services Senior Consultant               where you said it'd be!  A
Lehigh University Computing Center            wallet full of money!
Internet: <LUKEN@VAX1.CC.LEHIGH.EDU>  Calvin: Yeah, it's Dad's.  I buried it
BITNET:   <LUKEN@LEHIIBM1>                    here last week!

--------------------

Date:         Mon, 11 Jul 88 11:34:26 EDT
Reply-To:     Virus Discussion List <VIRUS-L@LEHIIBM1>
Sender:       Virus Discussion List <VIRUS-L@LEHIIBM1>
From:         "Kenneth R. van Wyk" <LUKEN@LEHIIBM1>
Subject:      New version of PKARC on-line

I finally got around to updating the PKARC program that's on-line  here  at
Lehigh  for  VIRUS-L readers. I now have the file PK36 UUE available on the
LISTSERV. The file was downloaded  directly  (by  me)  from  SIMTEL20.ARPA.
Keith  Peterson  got the version on SIMTEL20.ARPA directly from Phil Katz's
bboard.

As with all of the binaries on the  LISTSERV,  PK36  is  distributed  as  a
uuencoded  file.  See  the monthly announcement message for instructions on
how to uudecode this file back into a binary file.

Ken

Kenneth R. van Wyk                    Hobbes: Wow, buried treasure right
User Services Senior Consultant               where you said it'd be!  A
Lehigh University Computing Center            wallet full of money!
Internet: <LUKEN@VAX1.CC.LEHIGH.EDU>  Calvin: Yeah, it's Dad's.  I buried it
BITNET:   <LUKEN@LEHIIBM1>                    here last week!

--------------------

Date:         Mon, 11 Jul 88 12:40:53 CDT
Reply-To:     Virus Discussion List <VIRUS-L@LEHIIBM1>
Sender:       Virus Discussion List <VIRUS-L@LEHIIBM1>
From:         Len Levine <len@EVAX.MILW.WISC.EDU>
Subject:      possible virus?

I heard just yesterday that one of my friends was  having  trouble  with  a
copy  of  Norton Utilities version 3.00. He pointed out that the copy which
he runs from a protected floppy disk works well, but  when  he  loads  that
copy  onto  his  hard  disk, it fails. He also noted that the copy from the
protected disk showed differences between itself and the hard disk copy  he
had  just  made.  The  problem  repeated  several times. No other symptoms.

Any ideas? I have not tried to copy this material to my machine, I have not
asked about the date signature on the copies, or about  the  sizes  of  the
files.

len@evax.milw.wisc.edu

--------------------

*** end of Virus-L issue ***
Return-Path: XPUM04@prime-a.central-services.umist.ac.uk
Received: from G.SEI.CMU.EDU by ubu.cert.sei.cmu.edu (5.61/2.3)
        id AA25772; Tue, 12 Jun 90 06:24:55 -0400
Received: from SEI.CMU.EDU by g.sei.cmu.edu (5.61/2.5)
        id AA12873; Tue, 12 Jun 90 06:24:53 -0400
Received: from nsfnet-relay.ac.uk by sei.cmu.edu (5.61/2.3)
        id AA03918; Tue, 12 Jun 90 06:24:45 -0400
Received: from sun.nsfnet-relay.ac.uk by vax.NSFnet-Relay.AC.UK 
           via Janet with NIFTP  id aa09088; 12 Jun 90 10:59 BST
From: Anthony Appleyard <XPUM04@prime-a.central-services.umist.ac.uk>
To: KRVW <@NSFnet-Relay.AC.UK:KRVW@sei.cmu.edu>
Date:         Tue, 12 Jun 90 11:02:36 BST 
Message-Id:   <$TGVTCZHTCBNR at UMPA>
Subject:      Virus-L vol 0 issue #0711



Virus-L Digest Mon, 11 Jul 88, Volume 0 : Issue #0711

Today's Topics

Question about virus simulator
New version of PKARC on-line
possible virus?

------------------------------

Date:         Mon, 11 Jul 88 09:49:04 EDT
Reply-To:     Virus Discussion List <VIRUS-L@LEHIIBM1>
Sender:       Virus Discussion List <VIRUS-L@LEHIIBM1>
From:         "Kenneth R. van Wyk" <LUKEN@LEHIIBM1>
Subject:      Question about virus simulator

As mentioned here some time back, the National Bulletin Board Society has a
product called a  virus  simulator.  They  also,  by  the  way,  market  an
anti-virus program, but its name escapes me at the moment. Does anyone have
any  experience with their virus simulator that you could relate to VIRUS-L
readers? It's supposed to test an anti-virus package against  most  of  the
current  known  virus  infiltration  methods.  I've  heard some conflicting
messages about its usefulness, though. For example, it is alleged  to  come
up  with  erroneous  reports against some of the current crop of anti-virus
products by reporting that a particular virus would be able to  infect  the
system,  when  the  opposite  has  been  proven  to  be  true.  It would be
interesting to hear some independent evaluation(s)  of  this  product.  Any
comments on this sort of testing scheme?

Ken

Kenneth R. van Wyk                    Hobbes: Wow, buried treasure right
User Services Senior Consultant               where you said it'd be!  A
Lehigh University Computing Center            wallet full of money!
Internet: <LUKEN@VAX1.CC.LEHIGH.EDU>  Calvin: Yeah, it's Dad's.  I buried it
BITNET:   <LUKEN@LEHIIBM1>                    here last week!

--------------------

Date:         Mon, 11 Jul 88 11:34:26 EDT
Reply-To:     Virus Discussion List <VIRUS-L@LEHIIBM1>
Sender:       Virus Discussion List <VIRUS-L@LEHIIBM1>
From:         "Kenneth R. van Wyk" <LUKEN@LEHIIBM1>
Subject:      New version of PKARC on-line

I finally got around to updating the PKARC program that's on-line  here  at
Lehigh  for  VIRUS-L readers. I now have the file PK36 UUE available on the
LISTSERV. The file was downloaded  directly  (by  me)  from  SIMTEL20.ARPA.
Keith  Peterson  got the version on SIMTEL20.ARPA directly from Phil Katz's
bboard.

As with all of the binaries on the  LISTSERV,  PK36  is  distributed  as  a
uuencoded  file.  See  the monthly announcement message for instructions on
how to uudecode this file back into a binary file.

Ken

Kenneth R. van Wyk                    Hobbes: Wow, buried treasure right
User Services Senior Consultant               where you said it'd be!  A
Lehigh University Computing Center            wallet full of money!
Internet: <LUKEN@VAX1.CC.LEHIGH.EDU>  Calvin: Yeah, it's Dad's.  I buried it
BITNET:   <LUKEN@LEHIIBM1>                    here last week!

--------------------

Date:         Mon, 11 Jul 88 12:40:53 CDT
Reply-To:     Virus Discussion List <VIRUS-L@LEHIIBM1>
Sender:       Virus Discussion List <VIRUS-L@LEHIIBM1>
From:         Len Levine <len@EVAX.MILW.WISC.EDU>
Subject:      possible virus?

I heard just yesterday that one of my friends was  having  trouble  with  a
copy  of  Norton Utilities version 3.00. He pointed out that the copy which
he runs from a protected floppy disk works well, but  when  he  loads  that
copy  onto  his  hard  disk, it fails. He also noted that the copy from the
protected disk showed differences between itself and the hard disk copy  he
had  just  made.  The  problem  repeated  several times. No other symptoms.

Any ideas? I have not tried to copy this material to my machine, I have not
asked about the date signature on the copies, or about  the  sizes  of  the
files.

len@evax.milw.wisc.edu

--------------------

*** end of Virus-L issue ***
