Return-Path: XPUM04@prime-a.central-services.umist.ac.uk
Received: from G.SEI.CMU.EDU by ubu.cert.sei.cmu.edu (5.61/2.3)
        id AA04481; Wed, 20 Jun 90 17:21:09 -0400
Received: from SEI.CMU.EDU by g.sei.cmu.edu (5.61/2.5)
        id AA06963; Wed, 20 Jun 90 17:21:09 -0400
Received: from nsfnet-relay.ac.uk by sei.cmu.edu (5.61/2.3)
        id AA23120; Wed, 20 Jun 90 17:20:58 -0400
Received: from sun.nsfnet-relay.ac.uk by vax.NSFnet-Relay.AC.UK 
           via Janet with NIFTP  id aa23226; 20 Jun 90 16:20 BST
From: Anthony Appleyard <XPUM04@prime-a.central-services.umist.ac.uk>
To: DAVIDF@cs.heriot-watt.ac.uk
Date:         Wed, 20 Jun 90 16:33:48 BST 
Message-Id:   <$TGWGCZNQBTRG at UMPA>
Subject:      Virus-L vol 0 issue #1024



Virus-L Digest Mon, 24 Oct 88, Volume 0 : Issue #1024

Today's Topics

Dissertation Copy?
even *MORE* on hardware damage
ANTI-VIRUS PROGRAM ARCHIVE
RE: CMU and the virus
Re: The Virus Conference - thank you
JV Virus...
Conference
PC disk diagnostics- destructive?

------------------------------

Date:         Mon, 24 Oct 88 02:35:00 CDT
From:         GREENY <MISS026@ECNCDC>
Subject:      Dissertation Copy?

Does anyone know of where I could obtain a copy (if this is possible...) of
Fred Cohen's dissertation on "Computer Viruses -- Theory and  Experiments"?
Thanx in advance.... Bye for now but not for long, Greeny

Bitnet: miss026@ecncdc
Internet: miss026%ecncdc.bitnet@cunyvm.cuny.edu
Disclaimer: Do I really need one?

--------------------

Date:         Mon, 24 Oct 88 03:01:00 CDT
From:         GREENY <MISS026@ECNCDC>
Subject:      even *MORE* on hardware damage

All this talk of "programs" causing damage to hardware has caused a few  of
the  ole  cobwebs  to  clear  out  of the history section of my brain which
caused a story that I heard a long long  time  ago  in  a  CS101  class  to
surface..

"...It seems that a programmer who delighted  in  taking  excessively  long
lunch hours discovered a way to shut down the computer for hours at a time.
It  happened that the programmer -- in those days also being somewhat of an
Electrical Engineer -- discovered exactly which MAGNETIC CORE  was  closest
to  the  High-Temp  shutdown  sensor, and wrote a program which continously
wrote an alternating pattern of binary 0's and 1's to *THE* core, until  it
got  hot enough to trigger the High-Temp shutdown sensor. The sensor, being
decieved into thinking that the entire machine  was  overheating,  promptly
shut it down"
...An oldie, but a goodie...

Bye for now but not for long, Greeny

Bitnet: miss026@ecncdc
Internet: miss026%ecncdc.bitnet@cunyvm.cuny.edu
Disclaimer: If you happen to still have some  core  memory  machines  being
    used and you pull this trick -- forget where you read this! :->

--------------------

Date:         Mon, 24 Oct 88 13:19:00 PDT
From:         SUE@UWAV1.ACS.WASHINGTON.EDU
Subject:      ANTI-VIRUS PROGRAM ARCHIVE

<I THOUGHT THE FOLLOWING MIGHT BE OF INTREST TO VIRUS-L MEMEBERS....>

From:   IN%"ADVISE-L@NDSUVM1"  "User Services List" 24-OCT-1988 13:00
Subj:   Re: Virus...
Date: Fri, 21 Oct 88 23:39:29 CDT
From: David Boyes <DBOYES@ICSA.RICE.EDU>

The archive server at RPICICGE (and indirectly SIMTEL20.ARMY.MIL) maintains
a huge collection of anti-viral programs that should prove  equal  to  most
viroid strains.

Directions for using the RPI archive server can  be  found  in  the  latest
issues  of  NetMonth  (published by the famous Chris Condon [BITLIB@YALEVM]
and available from better servers near you, esp. LISTSERV@MARIST).  If  you
have  access to the Internet, the files are stored on simtel20.army.mil, IP
address 26.0.0.74. Log in as user ANONYMOUS, password is your  real  userid
and  node.  All  the  virus-related  files  are  stored  in  the  directory
PD1:<MSDOS.TROJAN-PRO>.

For those of you getting the  programs  via  the  Internet,  remember  that
SIMTEL20.ARMY.MIL  is  a DEC-20 and uses 36-bit words. You *must* use TENEX
mode when you FTP the files or you *will* get garbage --  issue  the  TENEX
command before doing the GET for the file you want.

David Boyes       (713) 527-4852     |BITNET: DBOYES@RICE
Systems Group                        |Internet: dboyes@icsa.rice.edu
ICSA - Rice University               |
UUCP: [your fav backbone]...!psuvax1!uncle-bens.rice.edu!dboyes

--------------------

Date:         Mon, 24 Oct 88 16:10:34 CDT
From:         Kevin Trojanowski <troj@UMAXC.WEEG.UIOWA.EDU>
Subject:      RE: CMU and the virus

I just talked with a friend of mine who happens to  be  a  student  at  CMU
about  viruses, and CMU did indeed get hit. I'm not sure what virus it was,
but it infected their Macs, including some file servers. It seems the virus
got onto one of the servers, and a new version of software for a class  was
to  be  distributed. Their distribution method is such that the software is
placed on the server, and all students needing it can then  copy  from  the
server  for  their  own  uses. Well, the server containing the distribution
copy of Genie (a Pascal interpreter of sorts) was contaminated, and thus an
infested copy of Genie got quickly and widely spready around campus. I know
this is somewhat sketchy, but it's all I have for now.  Perhaps  someone  a
little closer to the Pittsburgh area can get more information?

--------------------

Date:         Mon, 24 Oct 88 14:16:00 MDT
From:         KEENAN@UNCAMULT
Subject:      Re: The Virus Conference - thank you
In-Reply-To:  Message of 23 Oct 88 21:15 MDT from "Loren K Keim -- Lehigh
              Univer

Loren, I think you did an excellent service in organizing  the  conference.
The three of us from Calgary (Grey Lypowy, Corey Wirun and myself) found it
very  helpful  to  be  able  to  work some ideas back and forth without the
delays and mis-communications inevitable in this electronic  medium.  Also,
it  gave  us  a  good handle on what you guys are doing and, hopefully, you
understand what we are up to in Canada. I think a follow-on  conference  is
needed  at  some point but we should all sit back and digest this one for a
while. Tom Keenan

--------------------

Date:         Mon, 24 Oct 88 19:10:23 EDT
From:         "Pedro Sepulveda J." <PSEPULVE@USACHVM1>
Subject:      JV Virus...

Hi Networkers...! We are a group of student of the 'Universidad de Santiago
de Chile' with a special interest, 'Computer Viruses'.  Our  investigations
are  oriented  on the Jerusalem Virus (also known as the 'Hebrew University
Virus'), since that JV only has come at this moment. Due  to  circumstances
of  the educational ambient, we want to protect our works and resources. We
are disassembling the greater part of the JV. If you are interested in  our
work  and  you  have  information  too, we would can to join efforts for to
learn of the viruses instead of to be prejudiced for its and so  to  direct
this knowledges for good road.
Pedro Sepulveda J., Universidad de Santiago de Chile

--------------------

Date:         Mon, 24 Oct 88 14:51:00 EST
From:         ACS045@GMUVAX
Subject:      Conference

I myself found the size of the conference to actually be a boon  more  than
anything  else...it  was  a  lot easier to disseminate information across a
table than across the room, and I found it to be quite informative.  Thanks
to  Loren  and all the others who helped make this possible and I'd like to
toss in a special thanx to the guys from Calgary and Cornell who helped  in
carting  me  around this weekend----it was and is much appreciated. Overall
I'd say it was a successful and quite informative meeting.....

Steve Okay ACS045@GMUVAX.BITNET/acs045@gmuvax2.gmu.edu/CSR032 on The Source
"Ahhh...the keyboard...how quaint"

--------------------

Date:         Mon, 24 Oct 88 11:31:41 EDT
From:         SHERK@UMDD
Subject:      PC disk diagnostics- destructive?
In-Reply-To:  Message received on Fri, 21 Oct 88  13:02:30 EDT

"When I worked for a company which sold  PC's  we  burned  them  in  before
delivery by stressing them as much as possible. One of the things we did to
test drives was to run the diagnostics continuously overnight. It turned up
some  defective  machines (which we returned) but I don't remember the ones
we sent on to our customers coming back with problems in the  drives  at  a
higher  rate than the machines I fixed which we had not burned in. Based on
this I conclude  that  the  PC  diagnostic  seek  test  is  non-destructive
(despite  the  noise).  If anyone has any actual experience to the contrary
PLEASE post it.":-

You are right, it does no harm. In  fact,  with  a  little  lubrication  it
doesn't even make much noise.
Erik Sherk, Workstation Programer, University of Maryland

--------------------

*** end of Virus-L issue ***
