From: Kenneth R. van Wyk (The Moderator) Errors-To: krvw@SEI.CMU.EDU To: VIRUS-L@IBM1.CC.LEHIGH.EDU Path: sei.cmu.edu!krvw Subject: VIRUS-L Digest V2 #171 Reply-To: VIRUS-L@IBM1.CC.LEHIGH.EDU -------- VIRUS-L Digest Wednesday, 9 Aug 1989 Volume 2 : Issue 171 Today's Topics: worm discussion on comp.protocols.tcp-ip Looking for anti-viral archive sites Memory Resident ViruScan (PC) Intro to the anti-viral archives Re: nFLU Virus & Disinfectant (Mac) Amiga anti-viral archive sites Apple II anti-viral archive sites Atari ST anti-viral archive sites Documentation anti-viral archive sites IBMPC anti-viral archive sites --------------------------------------------------------------------------- Date: 08 Aug 89 13:09:44 +0000 From: krvw@sei.cmu.edu (Kenneth Van Wyk) Subject: worm discussion on comp.protocols.tcp-ip Those interested in discussing and/or reading about the Internet Worm (of last November) may want to take a look at some of the current discussions on the Usenet newsgroup, comp.protocols.tcp-ip. Ken ------------------------------ Date: Tue, 08 Aug 89 13:16:04 -0500 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: Looking for anti-viral archive sites In conjunction with comp.virus/VIRUS-L, we have been trying to establish a number of archive sites throughout the world to distribute anti-viral information and software. The microcomputer sites are well established, and now we'd like to expand our focus. To this end, I'm asking for one or more sites to volunteer their support of the archive system. What we are particularly looking for is a site to hold information of interest to the computers hooked up to these various networks. Most likely this will be focused on Unix support, but other systems (VMS, MVS, etc.) are also welcome. What interests you? The contents of the archives will be determined by what is contributed. Research papers, warnings of potential problems, bug fixes, monitoring software, etc. etc. The archives will hopefully reflect the community's needs. If you already maintain such an archive, please let me know so I can add you to our list of sites. If you'd like more information, write to me or post a message to the list. All follow-ups have been directed to comp.virus. Thanks for your consideration. Jim Wright jwright@atanasoff.cs.iastate.edu ------------------------------ Date: Tue, 08 Aug 89 12:07:56 -0700 From: portal!cup.portal.com!Alan_J_Roberts@Sun.COM Subject: Memory Resident ViruScan (PC) The following is a forward from John McAfee: ============================================================================== I've had a number of requests for a version of VIRUSCAN which will stay resident and check each program as it's loaded. The suggestions were that such a program would give no false alarms and would not interfere with other memory resident programs since it would not need to check interrupt 13 or other disk I/O calls. I succumbed to temptation and made a memory resident version. Initial testing has gone well and it indeed does not conflict with any other memory resident program and we have not seen sny false alarms from a variety of systems. When it loads it checks the partition table, boot sector, hidden files and the Command Interpreter. Thereafter it scan each program that's loaded. That's it. What I need now are beta testers. Everyone who insisted that I build this thing has a moral obligation to step up to the line and volunteer. Please call me at 408 727 4559, 408 988 3832, or leave a message on HomeBase at 408 988 4004. Thanking you in advance. John McAfee ------------------------------ Date: 08 Aug 89 22:54:39 +0000 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: Intro to the anti-viral archives # Introduction to the Anti-viral archives... # Listing of 08 August 1989 This posting is the introduction to the "official" anti-viral archives of virus-l/comp.virus. With the generous cooperation of many sites throughout the world, we are attempting to make available to all the most recent news and programs for dealing with the virus problem. Currently we have sites for Amiga, Apple II, Atari ST, IBMPC and Macintosh microcomputers, as well as sites carrying research papers and reports of general interest. Still looking for sites for larger systems. If you have general questions regarding the archives, you can send them to this list or to me. I'll do my best to help. If you have an archive site and would like to volunteer your site (and are in a position to do so! :-), send me a message. Also, if you have a submission for the archives, you can send it to me or to one of the persons in charge of the relevant sites. If you have any corrections to the lists, please let me know. ------------------------------ Date: Tue, 08 Aug 89 16:54:41 -0600 From: pvi!kenr@ncar.ucar.edu (Ken Regelson) Subject: Re: nFLU Virus & Disinfectant (Mac) In article <0004.8908081126.AA21881@ge.sei.cmu.edu> you write: >Disinfectant 1.2 has been added to the automatic file distribution for >those who are AFD'd to the VIRUSREM package at SCFVM. The file should >be distributed this evening. > > --- Joe M. Dear Joe: I don't know if this is at all possible, but is there some way I can be included in an AFD (Automatic File Distribution ??) for Disinfectant? I am not directly on the internet, but can be reached by UUCP. My apologies if thru ignorance I have asked for something that is inappropriate. My many thanks if there is some way to honor my request. I would be quite pleased to receive other Virus Remedies thru mail as well. thanks, again. Ken Regelson, Precision Visuals, Inc. ...boulder!pvi!kenr or boulder!kenr@pvi.com ------------------------------ Date: 09 Aug 89 03:13:08 +0000 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: Amiga anti-viral archive sites # Anti-viral archive sites for the Amiga # Listing last changed 08 August 1989 cs.hw.ac.uk Dave Ferbrache NIFTP from JANET sites, login as "guest". Electronic mail to . Main access is through mail server. The master index for the virus archives can be retrieved as request: virus topic: index The Amiga index for the virus archives can be retrieved as request: amiga topic: index For further details send a message with the text help The administrative address is ms.uky.edu Sean Casey Access is through anonymous ftp. The Amiga anti-viral archives can be found in /pub/amiga/Antivirus. The IP address is 128.163.128.6. pd-software.lancaster.ac.uk Steve Jenkins No access details yet. uxe.cso.uiuc.edu Mark Zinzow Lionel Hummel The archives are in /amiga/virus. There is also a lot of stuff to be found in the Fish collection. The IP address is 128.174.5.54. Another possible source is uihub.cs.uiuc.edu at 128.174.252.27. Check there in /pub/amiga/virus. ------------------------------ Date: 09 Aug 89 03:13:54 +0000 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: Apple II anti-viral archive sites # Anti-viral archive sites for the Apple II # Listing last changed 08 August 1989 brownvm.bitnet Chris Chung Access is through LISTSERV, using SEND, TELL and MAIL commands. Files are stored as apple2-l xx-xxxxx where the x's are the file number. cs.hw.ac.uk Dave Ferbrache NIFTP from JANET sites, login as "guest". Electronic mail to . Main access is through mail server. The master index for the virus archives can be retrieved as request: virus topic: index The Apple II index for the virus archives can be retrieved as request: apple topic: index For further details send a message with the text help The administrative address is pd-software.lancaster.ac.uk Steve Jenkins No access details yet. ------------------------------ Date: 09 Aug 89 03:16:43 +0000 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: Atari ST anti-viral archive sites # Anti-viral archive sites for the Atari ST # Listing last changed 08 August 1989 cs.hw.ac.uk Dave Ferbrache NIFTP from JANET sites, login as "guest". Electronic mail to . Main access is through mail server. The master index for the virus archives can be retrieved as request: virus topic: index The Atari ST index for the virus archives can be retrieved as request: atari topic: index For further details send a message with the text help The administrative address is . pd-software.lancaster.ac.uk Steve Jenkins No access details yet. ssyx.ucsc.edu Steve Grimm Access to the archives is through FTP or mail server. With ftp, look in the directory /pub/virus. The IP address is 128.114.133.1. For instructions on the mail-based archiver server, send help to . ------------------------------ Date: 09 Aug 89 03:17:22 +0000 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: Documentation anti-viral archive sites # Anti-viral archive sites for documentation # Listing last changed 08 August 1989 cs.hw.ac.uk Dave Ferbrache NIFTP from JANET sites, login as "guest". Electronic mail to . Main access is through mail server. The master index for the virus archives can be retrieved as request: virus topic: index The index for the **GENERAL** virus archives can be retrieved as request: general topic: index The index for the **MISC.** virus archives can be retrieved as request: misc topic: index **VIRUS-L** entries are stored in monthly and weekly digest form from May 1988 to December 1988. These are accessed as log.8804 where the topic substring is comprised of the year, month and a week letter. The topics are: 8804, 8805, 8806 - monthly digests up to June 1988 8806a, 8806b, 8806c, 8806d, 8807a .. 8812d - weekly digests The following daily digest format started on Wed 9 Nov 1988. Digests are stored by volume number, e.g. request: virus topic: v1.2 would retrieve issue 2 of volume 1, in addition v1.index, v2.index and v1.contents, v2.contents will retrieve an index of available digests and a extracted list of the the contents of each volume respectively. **COMP.RISKS** archives from v7.96 are available on line as: request: comp.risks topic: v7.96 where topic is the issue number, as above v7.index, v8.index and v7.contents and v8.contents will retrieve indexes and contents lists. For further details send a message with the text help The administrative address is lehiibm1.bitnet Ken van Wyk new: This site has archives of VIRUS-L, and many papers of general interest. Access is through ftp, IP address 128.180.2.1. The directories of interest are VIRUS-L and VIRUS-P. pd-software.lancaster.ac.uk Steve Jenkins No access details yet. unma.unm.edu Dave Grisham This site has a collection of ethics documents. Included are legislation from several states and policies from many institutions. Access is through ftp, IP address 129.24.8.1. Look in the directory /ethics. ------------------------------ Date: 09 Aug 89 03:17:54 +0000 From: jwright@atanasoff.cs.iastate.edu (Jim Wright) Subject: IBMPC anti-viral archive sites # Anti-viral archive for the IBMPC # Listing last changed 08 August 1989 cs.hw.ac.uk Dave Ferbrache NIFTP from JANET sites, login as "guest". Electronic mail to . Main access is through mail server. The master index for the virus archives can be retrieved as request: virus topic: index The IBMPC index for the virus archives can be retrieved as request: ibmpc topic: index For further details send a message with the text help The administrative address is ms.uky.edu Daniel Chaney This site can be reached through anonymous ftp. The IBMPC anti-viral archives can be found in /pub/msdos/AntiVirus. The IP address is 128.163.128.6. pd-software.lancaster.ac.uk Steve Jenkins No access details yet. uxe.cso.uiuc.edu Mark Zinzow This site can be reached through anonymous ftp. The IBMPC anti-viral archives are in /pc/virus. The IP address is 128.174.5.54. wsmr-simtel20.army.mil Keith Peterson Direct access is through anonymous ftp, IP 26.2.0.74. The anti-viral archives are in PD1:. Simtel is a TOPS-20 machine, and as such you should use "tenex" mode and not "binary" mode to retreive archives. Please get the file 00-INDEX.TXT using "ascii" mode and review it offline. NOTE: There are also a number of servers which provide access to the archives at simtel. WSMR-SIMTEL20.Army.Mil can be accessed using LISTSERV commands from BITNET via LISTSERV@NDSUVM1, LISTSERV@RPIECS and in Europe from EARN TRICKLE servers. Send commands to TRICKLE@ (for example: TRICKLE@AWIWUW11). The following TRICKLE servers are presently available: AWIWUW11 (Austria), BANUFS11 (Belgium), DKTC11 (Denmark), DB0FUB11 (Germany), IMIPOLI (Italy), EB0UB011 (Spain) and TREARN (Turkey). ------------------------------ End of VIRUS-L Digest *********************