VIRUS-L Digest            Wednesday, 12 Apr 1989        Volume 2 : Issue 86

Today's Topics:
(c) Brain killers wanted (PC)
Worm reports for BITNET subscribers
nVIR removal (Mac)
Debrain.. (PC)
virus conference
Why write a virus?

---------------------------------------------------------------------------

Date:         Tue, 11 Apr 89 03:05:49 ECT
From:         Ken Hoover <[email protected]>
Subject:      (c) Brain killers wanted (PC)

 We've been fighting what appears to be a winning battle against the
(c) Brain variant of the Brain virus here at SUNY-Binghamton for the
last couple of weeks.  Having just finished removing the little
buggers from a few of our disks (marked as suspicious because the
write protect tabs we put on them were gone), I am wondering if any of
the boot sector-restoring programs for the PC would be effective
against this virus.  Is wiping the boot sector effective against this
one?

Ken Hoover
UG Consultant, SUNY-Binghamton Computer Center.
Binghamton, NY, USA.

------------------------------

Date:       Tue, 11 Apr 89 09:05:50 BST
From:       David.J.Ferbrache <[email protected]>
Subject:    Worm reports for BITNET subscribers

The full set of reports on the Internet worm is available from the
Heriot-Watt info-server at <[email protected]>. Please only
request if you are a bitnet site in the US or Europe who can not
obtain these reports from other mail based archive servers.

1. A tour of the worm, Donn Seeley, Dept of computer science, University of
  Utah. Nroff me macros
  Topic: unix.utah

2. A report on the internet worm, Bob Page, Dept of computer science,
  University of Lowell.
  Plaintext
  Topic: unix.page

3. The internet worm program: an analysis, Eugene Spafford, Dept of
  computer science, Purdue University. Postscript
  Topic: unix.worm

4. With Microscope and Tweezers, an analysis of the internet virus of
  Nov 1988, Mark Eichin and Jon Rochlis, MIT. Postscript
  Topic: unix.mit

also worth reading

5. NSF Internet computer virus update, copyright CCNEWS
  Topic: unix.nsfupdate

To retrieve send mail to <[email protected]> of the form:

request: virus
topic: unix.mit

where the topic is given above, one or more topic lines can be included.

The server also holds a reasonably complete set of anti-viral software
and backissues of virus-l. The materials include all programs and
utilities available from RPICICGE, LEHIIBM1, SCFVM, INFO-MAC and
INFO-APPLE archives.

For a general index send:

request: index
topic: index

for materials specific to anti-viral measures send:

request: virus
topic: index

Cheers.

Dave Ferbrache                         Personal mail to:
Dept of computer science               Internet <[email protected]>
Heriot-Watt University                 Janet    <[email protected]>
79 Grassmarket                         UUCP     ..!mcvax!hwcs!davidf
Edinburgh,UK. EH1 2HJ                  Tel      (UK) 031-225-6465 ext 553

------------------------------

Date:         Tue, 11 Apr 89 04:35:21 EDT
From:         David Wind <[email protected]>
Subject:      nVIR removal (Mac)

    Is there a Macintosh application available on Bitnet that will
remove the nVIR virus from a Macintosh application without destroying
the infected application? (If so, how could I get a copy of it?)
                                                         D. WIND
                                                         347RNSD@CMUVM
Acknowledge-To: <347RNSD@CMUVM>

------------------------------

Date:         Tue, 11 Apr 1989 11:00:57 EDT
From:         James Paterson <[email protected]>
Subject:      Debrain.. (PC)

Hello...University of Guelph just discovered brain in one of our micro
clusters, and I was looking for Debrain, or any other anti-viral
programmes.  I seem to recall that there was some stored away on an
EDU node, but I am not sure.  Can anyone tell me where I could obtain
a copy of debrain, etc??

Thanks in Advance..

James Paterson
Student Consultant, University of Guelph
NetNorth: ACDJAMES@UOGUELPH
                       -------------------------------
Old soldiers never die.  Young ones do.

------------------------------

Date:    Tue, 4 Apr 89 21:54 CST
From:    "Paul Duckenfield (x5107)" <[email protected]>
Subject: virus conference

I would like to get some information on the upcoming virus conference,
or if I have missed it, where I can pick up information from the
conference.

Paul Duckenfield
[email protected]

[Ed. Give the Computer Security Institute a call at (508)-393-2600.]

------------------------------

Date:     Tue, 11 Apr 89 13:34:06 -0900
From:     Chris Hartman                    <[email protected]>
Subject:  Why write a virus?

       I know this was discussed about a month ago, but it was only
touched upon very briefly.  I would like to know everybody's opinion
on what reasons people have for writing and releasing viruses. I am
expecially concerned with those that are not for revenge or other
personal reasons.  Please send your replies to FSCMH1@ALASKA and in a
week or so I will post the results on the list.
       T.I.A.
           -Chris Hartman

------------------------------

End of VIRUS-L Digest
*********************
Downloaded From P-80 International Information Systems 304-744-2253