Return-Path: XPUM04@prime-a.central-services.umist.ac.uk Received: from G.SEI.CMU.EDU by ubu.cert.sei.cmu.edu (5.61/2.3) id AA25901; Tue, 12 Jun 90 06:49:38 -0400 Received: from SEI.CMU.EDU by g.sei.cmu.edu (5.61/2.5) id AA12995; Tue, 12 Jun 90 06:49:35 -0400 Received: from nsfnet-relay.ac.uk by sei.cmu.edu (5.61/2.3) id AA04298; Tue, 12 Jun 90 06:49:22 -0400 Received: from sun.nsfnet-relay.ac.uk by vax.NSFnet-Relay.AC.UK via Janet with NIFTP id aa09790; 12 Jun 90 11:16 BST From: Anthony Appleyard To: KRVW <@NSFnet-Relay.AC.UK:KRVW@sei.cmu.edu> Date: Tue, 12 Jun 90 11:06:12 BST Message-Id: <$TGVTCZHTCBRF at UMPA> Subject: Virus-L vol 0 issue #0803 Virus-L Digest Wed, 3 Aug 88, Volume 0 : Issue #0803 Today's Topics Re: Conference Notes ** no subject, date = Wed, 3 Aug 88 10:56:52 EDT Conference Notes Speakers Virus outbreak -- Brain type? Flushot3 ------------------------------ Date: Wed, 3 Aug 88 10:27:46 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: "Kenneth R. van Wyk" Subject: Re: Conference Notes In-Reply-To: Message of Tue, 2 Aug 88 22:26:50 EDT from Loren states that there are 6000 people on this forum. Loren, I don't know where you got that number but, for the record, there are approximately 450 current subscribers to the list, including about 15 to 20 redistribution points with an unknown number of readers at each. Just thought that I'd clear that up... Ken Kenneth R. van Wyk Milo: We're out of helium for the User Services Senior Consultant balloons! Who's been suckin' Lehigh University Computing Center the helium?! Internet: Gang: Not me! Not me! ... BITNET: Opus: Eeeeeep! Eeeeeep! -------------------- Date: Wed, 3 Aug 88 10:56:52 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: OJA@NCCIBM1 Re; occaision requests for means of contacting Eric Newhouse Since this request pops up about every couple of months, I'll leave the answer on the list.... Eric Newhouse has no BitNet access at this time. He can be accessed though the BBS he runs- The Crest BBS in Los Angeles, CA. : (213) 471-2518 His mailing address is Eric Newhouse 1834 Old Orchard Rd. Los Angeles, CA 90049 USA If anyone wants to relay messages to him, I am willing to do it since I call him on the BBS twice a month at least. (Do I ever need PC Pursuit! :-) No ad intended, just a comment on modem weary phone bill.) In a few months, a couple of the BBS systems that I work with are seeking to add the capability to connect to USENET. Maybe with a more "PC-ready" access, Eric Newhouse can have a BITNET link. Thank you. PS: Ken, my apologies for the file slipping through. Still experimenting with the various TRANSMIT options that are supposed to turn files into messages. If any is using TRANSMIT on a MVS / TSO system, please let me know how you do it. Thank you. -------------------- Date: Wed, 3 Aug 88 12:32:50 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: Loren K Keim -- Lehigh University Subject: Conference Notes First, thanks Ken for clearing up the number of people on the list. I thought my information was a bit nhigh. (Shame, Chris, Shame). Second, we've gotten quite a few interesting comments on speakers. We've gotten more people asking for speakers. The only new addition is Dr. Highland. I am unfamiliar with him, or perhaps I'm not putting him in the right context. The majority of people who wrote asked about panel conferences. To tell the truth, I would rather have a few speeches given, and have some roundtable discussion groups. I'm sure some would be interested in listending to lectures, but I think we'd bget a bit more out of some discussion groups as well. We had two people also ask that the conference be located near Philadelpihia. Again, if we hold it in the Valley or at Lehigh, we are 45 minutes up route 309 (Broad St Philly)... provided you don't hit too many lights. Or an hour and 15 min up the turnpike. I'd still like to hear from people interested in the conference and I'd like to know if the second weekend in October is too early. I am sure I can set up a good conference by that time, I'm more worried about people working it into their schedules. Regarding Hotels, we have quite a variety orf them. The range is 28 dollars a night up to 115 dollars a night. You can get very nice accomodations here for around 35 a night, or even nice accomodations for a little less. The total conference cost (without hotel) we could probably squeeze in for around 25.00 including a dinner. I have checked and we can hold a nice banquet for about 35 a person, and we can add on another 5-15 for snacks at the conference, booklets to go lalong withthe conference. Any preference? Loren -------------------- Date: Wed, 3 Aug 88 12:38:40 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: Loren K Keim -- Lehigh University Subject: Speakers Aha! Dr. highland is editor of Computers and Security. We have also had two suggestions to add a bit onto the pricetag of the conference inorder to help pad the trips of keynote speakers to the conference. Suggestions? Loren Keim -------------------- Date: Wed, 3 Aug 88 16:44:27 EST Reply-To: Virus Discussion List Sender: Virus Discussion List From: Naama Zahavi-Ely Subject: Virus outbreak -- Brain type? Hello! We seem to have a small outbreak of a virus here at Yale University. The virus resides on the boot sector of any diskette (DSDD or DSHD -- we did not try any 3.5" disks). It does not seem to infect hard disks. Typically, somebody would try to start a computer with an infected disk and get only a blinking cursor. When the computer would not start normally, the user would get some other system disk and do a warm boot. At this stage, if the new system disk is not write-protected, the viral code gets written onto its boot sector and the user still has a blinking cursor only. If the new system disk is write-protected, the machine seems to start normally; however, the virus code is still in memory and any subsequent warm boot with a non-write-protected disk infects that disk. Any other disk accesses -- format, copy, dir, del, cd -- do not seem to spread this virus. As far as I can tell, this seems to be a variant of the Brain virus; however, there is no Brain or brain signature anywhere in it (or any other recognizable text, for that matter). The obvious solution would be to educate users to use write-protected boot disks and to cold-boot the computer whenever they start a session. Is there anything else we should watch out for? Doe anybody have any experience with this specific virus? We'll be glad for any help! Thank you in advance, Naama Zahavi-Ely Staff Resource Specialist Project ELI Yale University (203) 432-6600 ext.341 -------------------- Date: Wed, 3 Aug 88 14:03:54 CST Reply-To: Virus Discussion List Sender: Virus Discussion List From: James Ford Subject: Flushot3 WARNING! A hacked program called (oddly enough) FLUSHOT3 is on the loose. This program is apparently a true virus. People interested in this should contact: Tom Sobczak 2580 Grand Av. Baldwin NY 11510 (516) 867-3550 The program was found infecting the computers of a well known communications company. I do not personally know this person, but he is looking for info on virii (basically, re-occuring infection patterns, etc). He would like any/all information, and will exchange with you whatever information he has. James -------------------- *** end of Virus-L issue ***