VIRUS-L Digest   Wednesday,  9 Aug 1989    Volume 2 : Issue 171

Today's Topics:

worm discussion on comp.protocols.tcp-ip
Looking for anti-viral archive sites
Memory Resident ViruScan (PC)
Intro to the anti-viral archives
Re: nFLU Virus & Disinfectant (Mac)
Amiga anti-viral archive sites
Apple II anti-viral archive sites
Atari ST anti-viral archive sites
Documentation anti-viral archive sites
IBMPC anti-viral archive sites

---------------------------------------------------------------------------

Date:    08 Aug 89 13:09:44 +0000
From:    [email protected] (Kenneth Van Wyk)
Subject: worm discussion on comp.protocols.tcp-ip

Those interested in discussing and/or reading about the Internet Worm
(of last November) may want to take a look at some of the current
discussions on the Usenet newsgroup, comp.protocols.tcp-ip.

Ken


------------------------------

Date:    Tue, 08 Aug 89 13:16:04 -0500
From:    [email protected] (Jim Wright)
Subject: Looking for anti-viral archive sites

In conjunction with comp.virus/VIRUS-L, we have been trying to establish
a number of archive sites throughout the world to distribute anti-viral
information and software.  The microcomputer sites are well established,
and now we'd like to expand our focus.  To this end, I'm asking for one or
more sites to volunteer their support of the archive system.

What we are particularly looking for is a site to hold information of
interest to the computers hooked up to these various networks.  Most
likely this will be focused on Unix support, but other systems (VMS, MVS,
etc.) are also welcome.  What interests you?

The contents of the archives will be determined by what is contributed.
Research papers, warnings of potential problems, bug fixes, monitoring
software, etc. etc.  The archives will hopefully reflect the community's
needs.

If you already maintain such an archive, please let me know so I can add
you to our list of sites.  If you'd like more information, write to me
or post a message to the list.  All follow-ups have been directed to
comp.virus.

Thanks for your consideration.

Jim Wright
[email protected]


------------------------------

Date:    Tue, 08 Aug 89 12:07:56 -0700
From:    [email protected]
Subject: Memory Resident ViruScan (PC)

The following is a forward from John McAfee:
==============================================================================

   I've had a number of requests for a version of VIRUSCAN which will
stay resident and check each program as it's loaded.  The suggestions
were that such a program would give no false alarms and would not
interfere with other memory resident programs since it would not need
to check interrupt 13 or other disk I/O calls.
   I succumbed to temptation and made a memory resident version.
Initial testing has gone well and it indeed does not conflict with any
other memory resident program and we have not seen sny false alarms
from a variety of systems.  When it loads it checks the partition
table, boot sector, hidden files and the Command Interpreter.
Thereafter it scan each program that's loaded.  That's it.  What I
need now are beta testers.  Everyone who insisted that I build this
thing has a moral obligation to step up to the line and volunteer.
Please call me at 408 727 4559, 408 988 3832, or leave a message on
HomeBase at 408 988 4004.
   Thanking you in advance.   John McAfee

------------------------------

Date:    08 Aug 89 22:54:39 +0000
From:    [email protected] (Jim Wright)
Subject: Intro to the anti-viral archives


# Introduction to the Anti-viral archives...
# Listing of 08 August 1989

This posting is the introduction to the "official" anti-viral archives
of virus-l/comp.virus.  With the generous cooperation of many sites
throughout the world, we are attempting to make available to all
the most recent news and programs for dealing with the virus problem.
Currently we have sites for Amiga, Apple II, Atari ST, IBMPC and
Macintosh microcomputers, as well as sites carrying research papers
and reports of general interest.  Still looking for sites for larger
systems.

If you have general questions regarding the archives, you can send
them to this list or to me.  I'll do my best to help.  If you have
an archive site and would like to volunteer your site (and are in
a position to do so! :-), send me a message.  Also, if you have a
submission for the archives, you can send it to me or to one of the
persons in charge of the relevant sites.

If you have any corrections to the lists, please let me know.


------------------------------

Date:    Tue, 08 Aug 89 16:54:41 -0600
From:    [email protected] (Ken Regelson)
Subject: Re: nFLU Virus & Disinfectant (Mac)

In article <[email protected]> you write:
>Disinfectant 1.2 has been added to the automatic file distribution for
>those who are AFD'd to the VIRUSREM package at SCFVM. The file should
>be distributed this evening.
>
> --- Joe M.

Dear Joe:

I don't know if this is at all possible, but is there some way I can
be included in an AFD (Automatic File Distribution ??) for Disinfectant?
I am not directly on the internet, but can be reached by UUCP.

My apologies if thru ignorance I have asked for something that is
inappropriate.

My many thanks if there is some way to honor my request.  I would be
quite pleased to receive other Virus Remedies thru mail as well.

thanks, again.

Ken Regelson, Precision Visuals, Inc.
..boulder!pvi!kenr        or   [email protected]


------------------------------

Date:    09 Aug 89 03:13:08 +0000
From:    [email protected] (Jim Wright)
Subject: Amiga anti-viral archive sites


# Anti-viral archive sites for the Amiga
# Listing last changed 08 August 1989

cs.hw.ac.uk
       Dave Ferbrache <[email protected]>
       NIFTP from JANET sites, login as "guest".
       Electronic mail to <[email protected]>.
       Main access is through mail server.
       The master index for the virus archives can be retrieved as
               request: virus
               topic: index
       The Amiga index for the virus archives can be retrieved as
               request: amiga
               topic: index
       For further details send a message with the text
               help
       The administrative address is <[email protected]>

ms.uky.edu
       Sean Casey <[email protected]>
       Access is through anonymous ftp.
       The Amiga anti-viral archives can be found in /pub/amiga/Antivirus.
       The IP address is 128.163.128.6.

pd-software.lancaster.ac.uk
       Steve Jenkins <[email protected]>
       No access details yet.

uxe.cso.uiuc.edu
       Mark Zinzow <[email protected]>
       Lionel Hummel <[email protected]>
       The archives are in /amiga/virus.
       There is also a lot of stuff to be found in the Fish collection.
       The IP address is 128.174.5.54.
       Another possible source is uihub.cs.uiuc.edu at 128.174.252.27.
       Check there in /pub/amiga/virus.


------------------------------

Date:    09 Aug 89 03:13:54 +0000
From:    [email protected] (Jim Wright)
Subject: Apple II anti-viral archive sites


# Anti-viral archive sites for the Apple II
# Listing last changed 08 August 1989

brownvm.bitnet
       Chris Chung <[email protected]>
       Access is through LISTSERV, using SEND, TELL and MAIL commands.
       Files are stored as
               apple2-l xx-xxxxx
       where the x's are the file number.

cs.hw.ac.uk
       Dave Ferbrache <[email protected]>
       NIFTP from JANET sites, login as "guest".
       Electronic mail to <[email protected]>.
       Main access is through mail server.
       The master index for the virus archives can be retrieved as
               request: virus
               topic: index
       The Apple II index for the virus archives can be retrieved as
               request: apple
               topic: index
       For further details send a message with the text
               help
       The administrative address is <[email protected]>

pd-software.lancaster.ac.uk
       Steve Jenkins <[email protected]>
       No access details yet.


------------------------------

Date:    09 Aug 89 03:16:43 +0000
From:    [email protected] (Jim Wright)
Subject: Atari ST anti-viral archive sites


# Anti-viral archive sites for the Atari ST
# Listing last changed 08 August 1989

cs.hw.ac.uk
       Dave Ferbrache <[email protected]>
       NIFTP from JANET sites, login as "guest".
       Electronic mail to <[email protected]>.
       Main access is through mail server.
       The master index for the virus archives can be retrieved as
               request: virus
               topic: index
       The Atari ST index for the virus archives can be retrieved as
               request: atari
               topic: index
       For further details send a message with the text
               help
       The administrative address is <[email protected]>.

pd-software.lancaster.ac.uk
       Steve Jenkins <[email protected]>
       No access details yet.

ssyx.ucsc.edu
       Steve Grimm <[email protected]>
       Access to the archives is through FTP or mail server.
       With ftp, look in the directory /pub/virus.
       The IP address is 128.114.133.1.
       For instructions on the mail-based archiver server, send
               help
       to <[email protected]>.


------------------------------

Date:    09 Aug 89 03:17:22 +0000
From:    [email protected] (Jim Wright)
Subject: Documentation anti-viral archive sites


# Anti-viral archive sites for documentation
# Listing last changed 08 August 1989

cs.hw.ac.uk
       Dave Ferbrache <[email protected]>
       NIFTP from JANET sites, login as "guest".
       Electronic mail to <[email protected]>.
       Main access is through mail server.
       The master index for the virus archives can be retrieved as
               request: virus
               topic: index
       The index for the **GENERAL** virus archives can be retrieved as
               request: general
               topic: index
       The index for the **MISC.** virus archives can be retrieved as
               request: misc
               topic: index
       **VIRUS-L** entries are stored in monthly and weekly digest form from
       May 1988 to December 1988.  These are accessed as log.8804 where
       the topic substring is comprised of the year, month and a week
       letter.  The topics are:
               8804, 8805, 8806 - monthly digests up to June 1988
               8806a, 8806b, 8806c, 8806d, 8807a .. 8812d - weekly digests
       The following daily digest format started on Wed 9 Nov 1988.  Digests
       are stored by volume number, e.g.
               request: virus
               topic: v1.2
       would retrieve issue 2 of volume 1, in addition v1.index, v2.index and
       v1.contents, v2.contents will retrieve an index of available digests
       and a extracted list of the the contents of each volume respectively.
       **COMP.RISKS** archives from v7.96 are available on line as:
               request: comp.risks
               topic: v7.96
       where topic is the issue number, as above v7.index, v8.index and
       v7.contents and v8.contents will retrieve indexes and contents lists.
       For further details send a message with the text
               help
       The administrative address is <[email protected]>

lehiibm1.bitnet
       Ken van Wyk <[email protected]> new: <[email protected]>
       This site has archives of VIRUS-L, and many papers of
       general interest.
       Access is through ftp, IP address 128.180.2.1.
       The directories of interest are VIRUS-L and VIRUS-P.

pd-software.lancaster.ac.uk
       Steve Jenkins <[email protected]>
       No access details yet.

unma.unm.edu
       Dave Grisham <[email protected]>
       This site has a collection of ethics documents.
       Included are legislation from several states and policies
       from many institutions.
       Access is through ftp, IP address 129.24.8.1.
       Look in the directory /ethics.


------------------------------

Date:    09 Aug 89 03:17:54 +0000
From:    [email protected] (Jim Wright)
Subject: IBMPC anti-viral archive sites


# Anti-viral archive for the IBMPC
# Listing last changed 08 August 1989

cs.hw.ac.uk
       Dave Ferbrache <[email protected]>
       NIFTP from JANET sites, login as "guest".
       Electronic mail to <[email protected]>.
       Main access is through mail server.
       The master index for the virus archives can be retrieved as
               request: virus
               topic: index
       The IBMPC index for the virus archives can be retrieved as
               request: ibmpc
               topic: index
       For further details send a message with the text
               help
       The administrative address is <[email protected]>

ms.uky.edu
       Daniel Chaney <[email protected]>
       This site can be reached through anonymous ftp.
       The IBMPC anti-viral archives can be found in /pub/msdos/AntiVirus.
       The IP address is 128.163.128.6.

pd-software.lancaster.ac.uk
       Steve Jenkins <[email protected]>
       No access details yet.

uxe.cso.uiuc.edu
       Mark Zinzow <[email protected]>
       This site can be reached through anonymous ftp.
       The IBMPC anti-viral archives are in /pc/virus.
       The IP address is 128.174.5.54.

wsmr-simtel20.army.mil
       Keith Peterson <[email protected]>
       Direct access is through anonymous ftp, IP 26.2.0.74.
       The anti-viral archives are in PD1:<MSDOS.TROJAN-PRO>.
       Simtel is a TOPS-20 machine, and as such you should use
       "tenex" mode and not "binary" mode to retreive archives.
       Please get the file 00-INDEX.TXT using "ascii" mode and
       review it offline.
       NOTE:
       There are also a number of servers which provide access
       to the archives at simtel.
       WSMR-SIMTEL20.Army.Mil can be accessed using LISTSERV commands
       from BITNET via LISTSERV@NDSUVM1, LISTSERV@RPIECS and in Europe
       from EARN TRICKLE servers.  Send commands to TRICKLE@<host-name>
       (for example: TRICKLE@AWIWUW11).  The following TRICKLE servers
       are presently available: AWIWUW11 (Austria), BANUFS11 (Belgium),
       DKTC11 (Denmark), DB0FUB11 (Germany), IMIPOLI (Italy),
       EB0UB011 (Spain) and TREARN (Turkey).


------------------------------

End of VIRUS-L Digest
*********************
Downloaded From P-80 International Information Systems 304-744-2253