From: Kenneth R. van Wyk (The Moderator) Errors-To: krvw@SEI.CMU.EDU To: VIRUS-L@IBM1.CC.LEHIGH.EDU Path: sei.cmu.edu!krvw Subject: VIRUS-L Digest V3 #41 Reply-To: VIRUS-L@IBM1.CC.LEHIGH.EDU -------- VIRUS-L Digest Wednesday, 14 Feb 1990 Volume 3 : Issue 41 Today's Topics: Introduction to the VIRUS-L Index VIRUS-L Index IBM PC Topics VIRUS-L Index Macintosh Topics VIRUS-L Index Miscellaneous Topics VIRUS-L is a moderated, digested mail forum for discussing computer virus issues; comp.virus is a non-digested Usenet counterpart. Discussions are not limited to any one hardware/software platform - diversity is welcomed. Contributions should be relevant, concise, polite, etc., and sent to VIRUS-L@IBM1.CC.LEHIGH.EDU (that's LEHIIBM1.BITNET for BITNET folks). Information on accessing anti-virus, document, and back-issue archives is distributed periodically on the list. Administrative mail (comments, suggestions, and so forth) should be sent to me at: krvw@SEI.CMU.EDU. - Ken van Wyk --------------------------------------------------------------------------- Date: Tue, 13 Feb 90 11:17:49 -0500 From: KARYN@NSSDCA.GSFC.NASA.GOV Subject: Introduction to the VIRUS-L Index This posting is the introduction to the VIRUS-L Index. Hopefully these indexes will be helpful to all. I've only been able to index the digests from January 1, 1990 as of yet, and still I am about a week or two behind. Should I ever catch up, I will begin to index back-digests. I plan to send out about one of these every month or so, and I would guess that after 3 or so months I will have to start anew, for the index will get too lengthy. Any suggestions in that area will be greatly appreciated. The index's topics are my own personal views on the content of each article; I have tried to sum up the contents of each in one line. In the cases that either the topic or the general heading does not point to a specific article's subject line from the digest, I have included the subject line in square brackets. Karen Pichnarczyk KARYN@NSSDCA.GSFC.NASA.GOV [Ed. Thanks for providing this great service, Karyn! I hope that the index helps everyone out in going through back issues. I'll maintain a copy of the index for anonymous FTP on cert.sei.cmu.edu, in pub/virus-l/archives. Feedback on format etc. is appreciated and can be sent to Karyn and/or to myself.] ------------------------------ Date: Tue, 13 Feb 90 11:18:39 -0500 From: KARYN@NSSDCA.GSFC.NASA.GOV Subject: VIRUS-L Index IBM PC Topics The following is an index of the VIRUS-L Digest involving IBM PC topics of 1990 (Volume 3). They are referenced by Digest number. I have included a short description of what the article is about, and in the cases that the description does not match the article's subject line, I have placed the subject line in square brackets. VIRUS-L Index for V3 Compiled by: Karen Pichnarczyk KARYN@NSSDCA.GSFC.NASA.GOV Last updated: February 12, 1990 Contains V3 1 through V3 28 (January 2, 1990 - January 31, 1990) Virus Alerts The Desktop Fractal Design System contains a virus (1813 virus) [Fractal Virus Alert] 9 Maybe not all copies of Desktop Fractal Design are infected [re: Virus scanning] 11 Driver Disk shipped with a Wise Data Systems PC has Stoned virus 10 Possible virus warning - text strings contain copyright messages for Compac Computer Corp 14 Orig. msg false-Desktop Fractal Design (his orig copy not contaminated) 22 US Gov't printing office Census disk has Jerusalem B [library virus] 26 ************************************************************************* PC Virus Protection Programs FPROT List of viruses it finds and description 7 Clarification - desc + list of viruses it checks for 11 2 minor bugs to be fixed in next release [Requests/Questions] 19 Devil's Dance virus FPROT string to detect it [three new viruses] 24 Flushot + has fast checksum checker [VIRUS-L Digest V3 #4] 5 Comment on its checksums - answer to above [The Checksum feature of Flushot+] 27 PCData Free utility from PC Magazine 25 Uploaded to SIMTEL 20 27 Virus Buster Virus Buster 1.10 has a bug (description) 2 Viruscan/CLEAN/SCANRES SCANV53 has a bug, therefore SCANV54 corrects it [SCANV54] 3 John McAfee describes SCANV53 problem 5 SCANV55 has been released (short desc) [SCANV55 and CLEANV55] 8 Which BBS has SCANV55 and CleanV55? 9 Can you get SCANxx.ARC as an AFD? 12 CLEAN doesn't make checksum same as before Jerusalem B infection 21 Hard Drive Overlord Request for info - he heard it was similar to Mac's Gatekeeper 15 General Anti-viral info What's recommended to use against viruses, where do I get it, etc 26 ************************************************************************* PC Viruses 1260 virus Descr - can't use ordinary ID strings to detect it, encryption Cascade virus [three new viruses] 24 Descr - uses encryption [4096 and 1260 viruses] 27 other viruses that have identical startup code: Syslock, Macho, Advent viruses 27 1813 virus (see also Jerusalem virus) The Desktop Fractal Design System contains a virus [Fractal Virus Alert] 9 How do I get rid of it? [Desktop Fractal Design System] 10 IBM's VIRSCAN identified it as 1813 (desc) [1812] 10 1813 is the Jerusalem virus 11 The Desktop Fractal Design System manufacturer sent a letter to all registered users [Academic Press makes good!] 15 2 articles explain what the virus does and a program to fight it [fractal disk infection] 15 Some books get recalled too [re: Academic Press makes good!] 17 One of Desktop Fract. Design orig thought was a virus WASN'T 22 Public Reply - defending that at least 1 copy was not infected 24 Which copy was infected? 24 4096 virus Descr-few public reports, but its virtually invisible [4096 & 1260 viruses] 27 8290 from India / request for info [8290 & Happy Birthday Jossie] 4 Advent virus Has similar startup code to 1260, Syslock, Macho [re: 1260 virus] 27 AIDS trojan Does AIDS encrypt then modify encrypt key? (Contains McAfee's statement about the trojan) [re: AIDS Trojan Research] 1 Response to SWE's encryption claim (DES, DEA) [comments attributed to SWE] 1 Discussion on AIDS - a reader's opinion [AIDS Program] 1 Only 1 company in Iceland got it [AIDS note] 4 How much damage was done total? 10 This is not the virus [There is more than 1 virus called AIDS!] 21 AIDS virus This is not the trojan [There is more than 1 virus called AIDS!] 21 Alabama Short comment [4096 and 1260 viruses] 27 Amstrad Virus Description of this virus [New Viruses] 3 It does have something to do with Amstrad computers / contains name of a respected professor in Portugal 6 DBASE Virus Case History of one infection [Two Serious Cases] 3 December 24 virus New one; displaying "Gledileg Jol" 2 It's a variant of Icelandic Virus, some details 2 Description / short, variant of Icelandic [New Viruses] 3 Devil's Dance Quick descr, w/ FPROT string to detect it [three new viruses] 24 Disk Killer / Ogre virus Request for help 4 Eddie (Dark Avenger, V651) V651 is called Eddie-2, uses some of same techniques [V651 virus] 24 Happy Birthday Jossie Virus from India / request for info [8290 & Happy Birthday Jossie] 4 Icelandic / Saratoga Case History of an infection [Two Serious Cases] 3 December 24th is a variant of Icelandic-2 [New Viruses] 3 Israeli Boot Virus Other Names: "Falling Letters Boot Virus" and "the Swapping Virus" [re: the missing viruses] 4 Jerusalem (see also 1813 virus) How do I get rid of it without deleting programs? 6 Where to get Jerusalem B virus remover 7 What does it do/CLEAN 55 doesn't appear perfect 21 Found Jerusalem A - what does this do - How to get rid of it??? 22 US Gov't printing office Census disk has Jer. B [library virus] 26 Confirmation/copy of letter they're sending out re: virus [confirmation on library disk infection] 26 Macho virus has similar startup code to 1260, Syslock, Advent [re: 1260 virus] 27 Musician / Oropax Virus Its the same as Oropax from West Germany [New Viruses] 3 Nuclear War Trojan/virus Has anyone heard of this? (short descr of possible trojan/virus) [Posssible new virus?? NUCLEUR war] 25 Check autoexec to see if someone just typed the msg [re: Thermal Nuclear War?] 27 Not a virus at all [Possible new virus followup] 27 Pakistani Brain Virus How do you eliminate Pakistan C-Brain virus? 14 Payday Virus Yet another variant of the Jerusalem virus [New Viruses] 3 Perfume (765 or "4711") Description / it asks a question which 4711 is the answer [New Viruses] 3 Ping Pong found Ping Pong and Ping Pong B [Virus info Request] 23 Stoned Virus Stoned Virus Killer - how to get rid of the Stoned Virus 2 History of creation and first usage [Re: viruses Rhyme and Reason] 6 Driver Disk shipped with a Wise Data Systems PC has Stoned virus 10 What's the impact of the "Stoned" virus? 20 found in LRS lab at Univ. of Guelph - what does it do/disinfectors 22 found in his dept [virus info request] 23 Where to find info 6 places w/info on "Stoned" 24 Syslock virus has similar startup code to 1260, Macho, Advent [re: 1260 virus] 27 V651 virus (see Eddie-2) full Descr incl errors made by author 24 Vcomm Description / from Poland [New Viruses] 3 Vienna Virus (also: VHP-648, Austrian) Oregon State University used M-Vienna to remove it 13 V651 virus similar to VHP-648 (Vienna, Austrian) [V651 virus] 24 Virus101 "Big Brother" of virus90, descr, [Three new viruses] 24 short comment [4096 & 1260 viruses] 27 W13 Description / with two variants known [New Viruses] 3 Can anyone translate text found? [Requests/Questions] 19 Polish translation [W13 Polish text] 23 Yankee Doodle virus Request for info and a disinfectant program 2 Plays song at 5 pm, is memory resident [the Yankee virus] 21 GWU infected - what to do? 25 Yankee virus Descr, NOT Yankee Doodle virus, plays every infection 21 Zero Bug Virus (also Palette) Also called 1536 or Palette virus [re: the missing viruses] 4 Can anyone confirm it is 1538 bytes? thinks it may be Zero Bug [Requests/Questions] 19 1538 might have been a typo - Palette IS zero bug [Re: Requests/Questions] 20 ------------------------------ Date: Tue, 13 Feb 90 11:19:09 -0500 From: KARYN@NSSDCA.GSFC.NASA.GOV Subject: VIRUS-L Index Macintosh Topics The following is an index of the VIRUS-L Digests involving Macintosh topicsof 1990 (Volume 3). They are referenced by Digest number. I have included a short description of what the article is about, and in the cases that the description does not match the article's subject line, I have placed the subject line in square brackets. VIRUS-L Index for V3 Compiled by: Karen Pichnarczyk KARYN@NSSDCA.GSFC.NASA.GOV Last updated: February 12, 1990 Contains V3 1 through V3 28 (January 2, 1990 - January 31, 1990) Virus Alerts after trying JCremote and MacII Diagnostic Sound, got a damaged resource fork. 11 Grammitik may contain WDEF A 19 New NVIR like virus, VIREX can detect, can't identify or fix; Disinfectant can't find [New virus?] 23 ************************************************************************* Anti-Virals How to get Mac Anti-viral programs 4 Another place to get them [RE: Anti-virus programs] 4 Is this Anti-viral site available to Usenet as well as Bitnet? 6 Is there alternate virus protection besides Vaccine & Gatekeeper? 6 answer to alt. virus prot: try RWATCHER [RE: Alt. virus prot.] 7 Eradicat'Em - place to get it (cures WDEF) [WDEF] 9 1st Aid Software, Publisher of Anti-virus Kit, will do no further updates to s/w [An unfortunate victim] 11 Disinfectant When Disinfectant is used, gets Gatekeeper violation 5 Want Disinfectant to use clone names too 21 There is NO version 1.6 yet! [Disinfectant versions] 22 Disinfectant 1.6 has been released - descr 27 Eradicat'Em Eradicat'Em - place to get it (cures WDEF) [WDEF] 9 The Eradicat'Em init may be unstable - looking for proof 19 Eradication! was unstable, good long descr of Eradicat'Em 20 Gatekeeper (see also "Implied Loader Virus") Where to get info on it? 3 Possible problem with Gatekeeper Aid INIT and Finder - request for help [Gatekeeper Aid Question] 3 Gatekeeper Aid 1.0.1 fixes Finder Bug [re: Gatekeeper Problems] 4 When Disinfectant is used, gets Gatekeeper violation 5 How do you configure Gatekeeper with a Dest Scanner? 6 Gatekeeper Aid found a virus - user never heard of it [Implied Loader 'Pack' virus] 6 Answer to implied Loader virus: Look for invisible file "PIC" 7 Infection [RE: Questioning ethics at computing sites] 9 something virus-like: Adobe Separator 20 (ADBS) [Gatekeeper veto: Normal Behavior or virus attack?] 27 General Topics How do you check for viruses if they have been Binhexed or used Stuffit? [Disinfecting Binhexed Files] 3 Implied Loader Virus Gatekeeper Aid found a virus - user never heard of it [Implied Loader 'Pack' virus] 6 Answer to implied Loader virus: Look for invisible file "PIC" 7 Brings up dangerous consequences 10 some more comments - [Implied Loading and Accidental Destruction] 11 SAM SAM 1.4 found WDEF A [WDEF A infection followup] 19 Scores Univ of Oregon has it sometimes 20 Sometimes Univ Nebraska Omaha gets it [re: WDEF at U of Oregon] 23 VIREX VIREX can catch it, but most VIREX users don't use that option [re: Apology to Mainstay Software] 3 VIRUS DETECTIVE descr. of odd behaviou of Virus Detective 3.0.1 [WDEF & Virus Detective 3.0.1] 11 VIRUSREM Problem: some nodes refuse parts - [Partial VIRUSREM Package] 7 Viruses in Public Labs Viruses that have hit this lab - discussion 3 WDEF Programs that catch/remove WDEF [Apology to Mainstay Software] 1 VIREX can catch it, but most VIREX users don't use that option [re: Apology to Mainstay Software] 3 Eradicat'Em kills it [WDEF] 9 descr. of odd behaviou of Virus Detective 3.0.1 [WDEF & Virus Detective 3.0.1] 11 Grammatik may have WDEF A infecting it 19 Grammatik was infected - SAM 1.4 found it 19 Please supply info on what WDEF does [RE: WDEF at U of Oregon] 21 WDEF propagates using data files [virus propogation in non-executible files] 27 WDEF sightings Another infection [WDEF A] 8 Infection [RE: Questioning ethics at computing sites] 9 found in Miami University in Oxford, Ohio 11 found in Trinity College, Dublin, Ireland 11 found in U. of North Carolian at Chapel Hill 13 found in Arizona State Univ - what was done to remove it 13 found at Univ. of Oregon, also found NVIR A&B, jerusalem, PingPong 15 found at Univ of Manitoba - Winnipeg, Canada 19 found at Univ of Oregon in 10 machines 20 found at Clemson Univ 22 found at Cambridge 22 Jan 23 found at Univ of Nebrasks Omaha 23 found at Washington State Univ. 23 twice found at a national copy center chain, also a univ bookstore [WDEF in public places] 23 found at Humboldt State U, CA. 24 found at Univ. of South Carolina 25 WDEF B found at Univ of Rochester 25 Found at Univ of Central Florida 25 WDEF A found at Connecticut college 27 WDEF A found at Univ. of Miami 27 ------------------------------ Date: Tue, 13 Feb 90 11:21:07 -0500 From: KARYN@NSSDCA.GSFC.NASA.GOV Subject: VIRUS-L Index Miscellaneous Topics The following is an index of the VIRUS-L Digests involving topics other than Macintosh or IBM PC of 1990 (Volume 3). They are referenced by Digest number. I have included a short description of what the article is about, and in the cases that the description does not match the article's subject line, I have placed the subject line in square brackets. VIRUS-L Index for V3 Compiled by: Karen Pichnarczyk KARYN@NSSDCA.GSFC.NASA.GOV Last updated: February 12, 1990 Contains V3 1 through V3 28 (January 2, 1990 - January 31, 1990) Anti-Viral Archives for all computers Latest copy 5 Introduction to anti-viral archives 28 Latest copy (January 31, 1990) 28 ************************************************************************* Files to Download Directions how to FTP from BITNET [Bitnet *can* FTP now] 16 Files added to MIBSRV.MIB.ENG.UA.EDU [New files] 16 Bitnet files now on SIMTEL-20 19 Files added to MIBSRV 26 Uploads to SIMTEL20: Uploaded Dirty Dozen List #9C to MSDOS.TROJAN.PRO 2 SCANV54 has been uploaded 8 SCANV55 & CLEANP55 uploaded 15 SCANV56, et al - uploaded 17 BITNET files on SIMTEL20 19 PCData files (from PC Magazine) have been uploaded 27 ************************************************************************* VAX Topics (VAX/VMS) Possible virus? Is there a virus on VAX? [UNCONFIRMED virus on Vax] 19 Response: person is a potential virus author [re: virus request] 23 Comment: yes, we should track potential virus authors [security and Internet Worms] 25 Requestor of virus info (V3 #19) may lose access to UMNEWS/UMBB Policy [VAX virus request and UMNEWS] 25 Thinks orig. requestor was a user, not potential writer/comment on Bill of Rights 25 Thinks originator committed an English language blunder [re: "Virus request" from Taiwan] 25 Comment: people should be able to responsibly give virus code to people [re: virus request] 26 ************************************************************************* AMIGA topics VIRUSX Correction: a version may be a trojan - discussion 1 XENO virus Help! I'm hit - what do I do? desc of virus and infection 13 ************************************************************************* Atari topics Does anyone know of a virus that causes a head crash? 9 ************************************************************************* Network Topics Some viruses can spread over a network - how they do it [Network Server Infections] 2 ************************************************************************* Discussions and Points of View Bank ATM cards (see also Morris Trial) Phone-in-credit-purchase industry/ATM cards you tell bank your password (PIN) [re: Trial & Double Standard] 23 The PW is not stored on the card 26 Book Reviews Review of "The Cuckoo's Egg" 3 Review/overview of "Computer Viruses: Dealing w/Electronic Vandalism & Programmed Threats" [ADAPSO virus book] 25 Saw a good review of the "Cuckoo's Egg" in Smithsonian Mag [Article on Cliff Stoll] 25 Comment on misprint in Review [re: ADAPSO virus book] 27 Biological vs computer viruses General Discussion [virus data collection] 3 A biologist speaks on the subject [virus biological analogy] 4 Request for references on this topic [Biological analogy source requested] 12 Reference given [Re: Biological references requested] 13 LP's have >1 groove-example given [re: practical a-priori viruscan] 23 Checksum Algorithm Discussion (see Signature Programs) Discussion of various authentication/signature/checksum algorithms 4 Answer [Uses of Macs against Viruses] 5 Another Answer (comment on Flushot+) [VIRUS-L Digest V3 #4] 5 Further Discussion of RSA, etc. 6 Questions to ponder 8 Comments on Checksums in general, using Flushot+ as an example [the checksum feature of FLU_SHOT+] 27 Computer Ethics Discussion on ethics of not informing users that a virus is present on public computers in general usage 6 Advice [RE: Questioning ethics at computing sites] 7 The univ was not ignoring it (explanation of action taken) [RE: Questioning ethics at computing sites] 9 Guidelines to reduce chance of propogating viruses [Organizational attitudes about virus protection] 11 An ethical code like medical code should apply to programmers 15 What is appropriate punishment [re: ethical judgement on the worm] 16 Moral/ethical comments (long) 17 Dispute the article in ethics 18 comment on societial norms vs normal computing practices (long) [Trial and Double Standard] 22 Professional responsibility where merchant doesn't remedy situation? [WDEF in Public Places] 23 What they do to protect a "public" MAC [Public PC lab responsibility] 26 Conferences Call for Papers - 13th Nat. Computer Security Conference (long) 1 Call for speakers - MIS 10th Annual Conference on Control, Audit & Security of IBM Systems 9 DES Helsinki Univ. has a separate implementation that can be anonymous FTP'd [re: DES Availability] 1 Discussion on DES/DEA; reply to letter submitted by SWE - cracking DES is harder than SWE says [Comments Attributed to SWE] 1 A W. German DES is available named PC-DES 4 Morris Trial Jurors selected who had no computer knowledge 12 comment on non-technical jurors 13 an article [New York Times on the Morris trial] 14 it is fair to use non-techie jurors 14 more comments on jurors 14 someone's experience as a juror 14 enjoy hearing about the trial on VIRUS-L 15 I've been on jury duty 15 An ethical code like medical code should apply to programmers 15 in defense of computer literate juries 16 more comments 16 news of the trial - convict him! 16 What is appropriate punishment [re: ethical judgement on the worm] 16 Lawyers want people without education on a jury 17 From a witness - views on the jury 17 Fact is- he did release the worm 17 Fed. law for punishment/can't stop him from getting a computer job 17 Moral/ethical comments (long) 17 comment on hiring Morris 17 (All articles in #18 are on this topic) Anything in trial supports the >1 author concept? 18 This forum says guilty! 18 Comments on jury and irresponsibility of Morris 18 Morris infected AT&T Bell in high school 18 Dispute the article in ethics 18 Give him "public service in the field of computing"??? 18 In defense of educated unemployed, homemakers&retired people 18 the verdict 18 Correction/comment on judge, sentencing is Feb. 27 19 Comment on AT&T breakin - [Morris hacking Incidents] 20 What judicial process said he released the worm (disputes V3 #17) [Innocent until proven...] 20 factually guilty vs legally guilty 21 Excerpts from an AP article [Morris found guilty] 21 Morris had testified he did it. 21 Nothing in trial supports >1 person BUT Morris didn't write the password cracking code 22 comment on societial norms vs normal computing practices (long) [Trial and Double Standard] 22 Why didn't Morris try to help the Internet group stop it? 23 Phone-in-credit-purchase industry/ATM cards you tell bank your password (PIN) [re: Trial & Double Standard] 23 How do I get a copy of Spafford's report? 24 Morris did try to stop worm, but was too late 25 according to papers, morris conceded he WAS responsible for worm [re: innocent until...] 26 Shrink-wrap Software How to copyright shrink-wrap software / legalities [re: shrink-wrap Licenses] 4 I thought shrink wrapped s/w was safe?! 9 3 steps to safe s/w 10 Retailers can re-shrinkwrap s/w 10 Retailers perhaps use tamper-resistant packaging like Tylenol? 11 Get in habit of scanning everything - stores re-wrap and commercial distributers sometimes have viruses 11 Stores don't do virus checks on returned S/W (case history) 11 Retailers have a "Trial/Return" policy for S/W 11 Vendors can sell s/w on write-protected diskettes 12 Steps a vendor can take to make sure returned s/w is virus-free 12 Some vendors do sell s/w on write-protected diskettes 12 Comment on vendor sell write-prot. s/w [Protecting s/w from contamination] 12 In the UK they rarely see shrink-wrap; retailer won't demo 12 Someone determined can write on a write-protected disk 13 Most software comes write-enabled 13 Most infections are by the well-intentioned 14 You do want to deal with retailers with a return policy 14 Answer from someone who works in a store [re: some more thoughts on shrink-wrapped software] 14 Suggest that vendors w/ write prot. disks note that fact on disk 14 Stores can *simply* do a sector-by-sector, byte-by-byte compare of returned software 15 Why not just run a good virus checker? 15 If someone really wanted to infect a write-prot. disk, they could 15 Dispute V3 #15 (*simply*) 20 Trivial to tweak a drive to think a disk is writable - S/W not factory write-protected 21 If S/W is returned, store ships disks to vendor, vendor ships clean disks to store 24 Signature Programs glad to hear people are concerned 22 detailed dispute to RADAI'S comments 22 Analysis found useful 22 Brief summary of Bosen's opinions 22 Where get descr of ISO 8731-2? 24 It takes more time to do then is acceptible (long) 24 Sophistated algorithms are NOT inherently superior to less soph. 24 Clearing up misconceptions 26 Spafford's Theorems Comment on general viral information 1 more comments 3 more [WHM on Spafford's theorems] 4 comment 4 Dispute V3 #1 [RE: comment by William Hugh Murray] 6 More discussion of V3 #1 [RE: Spafford's Theorems] 6 Another reply to WHMurray 6 A comment on the Dispute [public trust vs viruses] 7 Another comment on the Dispute [Virus Scare & Backups] 7 Virus Trends (also: Faxes on PC's) Correction on topic that a version of VIRUSX may be a trojan 1 New attack methods - text files, mail, postscript, fax, C++ 3 more opinions 3 a short comment 4 PC Fax Boards have async & bisync modem capability 5 Discussion of how PC Fax boards can transmit viruses 6 Concievable to embed a virus in a postscript font; also, VIDEO cyphers are viruses of a sort 6 What FAXes on PC's can do 7 comment on Postscript fonts [RE: shrink wrap...still safe?] 11 Viruses Rhyme and Reason Discussion Viruses Rhyme and Reason - discussion of mindset of writers 2 Comment on how the author of the "Stoned" virus created it 6 Theoretical Virus Scanning (incl: Comments on article in "American Mathematical Monthly") Descr. of article in a periodical: "no completely safe computer virus test is possible" [An interesting article] 9 Comment on article [re: virus scanning] 11 A proof a la Cohen if a program P1 is a virus.... 13 Dispute of the proof (or extension of the proof?) 15 Dispute of the dispute [Universal virus scan] 17 Theory and real-life don't match 17 Nothing is 100% accurate/also memory protection architechtures 19 Additional info on proof 19 the halting problem proves that proofs don't work 20 In defense of proofs 20 Antithesis of proofs and halting problem 20 Either its a virus or it may be a virus 21 Proof is: if it's suspecious, don't load it. 21 Can't detect viruses that haven't emerged / indecidable if a virus can determine if a prog is a checker program 22 Dispute / comments 22 Halting problem comments 23 Is it possible to come up with a universal virus detector? [virus modeling] 23 simply check all executibles sizes / Has a copy of program that does this. [W13 Polish text] 23 3-page definition of the term "virus" 24 Those proofs are irrelevant-can trivally detect viruses thru H/W 25 Don't understand Leichter-propose "last changed" stamp 27 can't simply check exec's-WDEF is an ex. of data files propogating viruses [virus propogation in non-executable files] 27 General Topics Tracking infections - presentation of possible discussion base 1 Questions about Virus-L from a new reader 1 Don't use progs you can't trust [Do not use this diskette] 1 Using ASCII 255 to conceal presence of a directory 1 Virus researcher's copy of virus shows up in a variant of the Icelandic and Dbase virus [Two Serious Cases] 3 Viruses in Bulgaria - he can supply info on some listed viruses 13 2 new topics - vaccine for errors?; can failed LISTSERVERS make networks collapse? [re: spool..bug or virus,...] 15 McAfee included top 100 influential leaders in computer industry 15 Thank-you Usenet folks! 20 Whats the difference between virus and worm? 21 Need help in preparing doc on viruses / How to protect public access cluster? [virus info request] 23 Answer difference between virus and worm 24 Why doesn't someone run an MSDOS emulator in a MSDOS machine? [Prophylactic anti-viral suggestion] 25 ------------------------------ End of VIRUS-L Digest *********************