Return-Path: XPUM04@prime-a.central-services.umist.ac.uk Received: from G.SEI.CMU.EDU by ubu.cert.sei.cmu.edu (5.61/2.3) id AA25916; Tue, 12 Jun 90 06:51:04 -0400 Received: from SEI.CMU.EDU by g.sei.cmu.edu (5.61/2.5) id AA13010; Tue, 12 Jun 90 06:51:02 -0400 Received: from nsfnet-relay.ac.uk by sei.cmu.edu (5.61/2.3) id AA04322; Tue, 12 Jun 90 06:50:47 -0400 Received: from sun.nsfnet-relay.ac.uk by vax.NSFnet-Relay.AC.UK via Janet with NIFTP id aa09867; 12 Jun 90 11:18 BST From: Anthony Appleyard To: KRVW <@NSFnet-Relay.AC.UK:KRVW@sei.cmu.edu> Date: Tue, 12 Jun 90 11:11:12 BST Message-Id: <$TGVTCZHTCBWV at UMPA> Subject: Virus-L vol 0 issue #0827 Virus-L Digest Sat, 27 Aug 88, Volume 0 : Issue #0827 Today's Topics New Mac Virus (INIT 6, 'LoadAT') may not be a virus RE: Controlled Study of Viruses Re: Controlled Study of Viruses Re: The First Virus PERFECT virus? The Adolescence of P1 ------------------------------ Date: Sat, 27 Aug 88 01:54:20 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: Amanda B Rosen Subject: New Mac Virus (INIT 6, 'LoadAT') may not be a virus It's been a long while since I used MacServe, but I am positive that the 'LoadAT' INIT 6 described in the recent article about a supposed Mac Virus is actually part of MacServe. I can't explain the invisible files, but I'm sure that all sorts of odd things will happen if you try to run MacServe without one of its inits. Creating invisible and oddly named files is a possibility. I also seem to remember something about a file named something- or-other evill, but I can't remember what it was. It was not, I think, a virus. If the person from that english college is not on this list, would the person who cross-posted the original article please forward this response to him? Thanks. /a -------------------- Date: Sat, 27 Aug 88 10:41:00 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: WHMurray@DOCKMASTER.ARPA Subject: RE: Controlled Study of Viruses In-Reply-To: Message of 24 Aug 88 02:42 EDT from "ZDABADE%VAX1.CC.LEHIGH.EDU at CUNYVM.CUNY.EDU" >can you see the situation that would arise if someone else out there also >got a copy of the viruses "to study" but instead had other plans for them! >As it stands, sending you viruses HAS to be a weak link in security because >I doubt that most of the places sending to you have even met you in person. >David > From: David A. Bader, Studentis Maximus Hear! Hear! Without regard to the motive, there is more than enough traffic in viruses without forwarding them knowingly. If you see one, sterilize it; if you cannot sterilize it, kill it. Under no circumstances should you give one to anyone else. Sterilized viruses can still carry all of the information required by serious academics. William Hugh Murray, Fellow, Information System Security, Ernst & Whinney 2000 National City Center Cleveland, Ohio 44114 21 Locust Avenue, Suite 2D, New Canaan, Connecticut 06840 -------------------- Date: Sat, 27 Aug 88 10:52:00 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: WHMurray@DOCKMASTER.ARPA Subject: Re: Controlled Study of Viruses In-Reply-To: Message of 23 Aug 88 19:58 EDT from "Loren K Keim -- Lehigh University" Loren Keim writes: >I debated whether to send this directly to David or to >the entire list, and I feel that the list should know >that we NEVER compromise on security. With all due respect for his motives and intentions, if twenty years in security has taught me nothing else, it has taught me that everyone compromises security. It is the nature of things. Security is by definition a compromise. It cannot be otherwise. I am much more confident in the security efforts of people that understand this, than with those of people who tell me that they "NEVER" compromise. EVERYBODY compromises (even I). William Hugh Murray, Fellow, Information System Security, Ernst & Whinney 2000 National City Center Cleveland, Ohio 44114 21 Locust Avenue, Suite 2D, New Canaan, Connecticut 06840 -------------------- Date: Sat, 27 Aug 88 13:26:26 EDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: David.Slonosky@QUEENSU.CA Subject: Re: The First Virus In-Reply-To: >...Of course that is absurd on its face since "The Adolescence of P1" was >published in the early 70's. It described "trapdoors," "Trojan Horses," >and viruses in excruciating and withering detail. These were the >"kernel of truth" on which the author hung his fantasy. > >Merle Miller quotes Harry Truman: "The only thing new in the world is >the history you don't know." What exactly is "The Adolescence of P1"? Fact or fiction? David Slonosky/QueensU/CA,"",CA | Know thyself? | | If I knew myself, I'd run away. | -------------------- Date: Sat, 27 Aug 88 12:22:30 PDT Reply-To: Virus Discussion List Sender: Virus Discussion List From: Robert Slade Subject: PERFECT virus? Recently there has been specualtion of a "targetted" virus that may be aimed at Word Pefect 5.0. My brothers office has recently upgraded to 5.0 and seems to have coincidentally been hit with a virus. An extra, and as yet unidentified hidden file seems to have appeared on the hard disk and many floppies. (This is in addition to the two MS-DOS system files and one partitioning the hard disk.) Word perfect files are being steadily corrupted, as well as some others. Any info relating to this is, of course, appreciated. I will post further details as they become available. -------------------- Date: Sat, 27 Aug 88 20:03:00 EST Reply-To: Virus Discussion List Sender: Virus Discussion List From: Dimitri Vulis Subject: The Adolescence of P1 The Adolescence of P1 is a novel by Thomas J. Ryan, highly recommended. >From technical point of view, the virus part is quite realistic (undoubtfully influenced by the viri extant on Arpanet even when the book was writtem); the AI part is pure SciFi. If you've never read it, you definitely should. -DV -------------------- *** end of Virus-L issue ***