VIRUS-L Digest   Wednesday, 14 Feb 1990    Volume 3 : Issue 41

Today's Topics:

Introduction to the VIRUS-L Index
VIRUS-L Index IBM PC Topics
VIRUS-L Index Macintosh Topics
VIRUS-L Index Miscellaneous Topics

VIRUS-L is a moderated, digested mail forum for discussing computer
virus issues; comp.virus is a non-digested Usenet counterpart.
Discussions are not limited to any one hardware/software platform -
diversity is welcomed.  Contributions should be relevant, concise,
polite, etc., and sent to [email protected] (that's
LEHIIBM1.BITNET for BITNET folks).  Information on accessing
anti-virus, document, and back-issue archives is distributed
periodically on the list.  Administrative mail (comments, suggestions,
and so forth) should be sent to me at: [email protected].
- Ken van Wyk

---------------------------------------------------------------------------

Date:    Tue, 13 Feb 90 11:17:49 -0500
From:    [email protected]
Subject: Introduction to the VIRUS-L Index

This posting is the introduction to the VIRUS-L Index.  Hopefully
these indexes will be helpful to all.  I've only been able to index
the digests from January 1, 1990 as of yet, and still I am about a
week or two behind.  Should I ever catch up, I will begin to index
back-digests.

I plan to send out about one of these every month or so, and I
would guess that after 3 or so months I will have to start anew, for
the index will get too lengthy.  Any suggestions in that area will be
greatly appreciated.

The index's topics are my own personal views on the content of each
article; I have tried to sum up the contents of each in one line.  In
the cases that either the topic or the general heading does not point
to a specific article's subject line from the digest, I have included
the subject line in square brackets.

Karen Pichnarczyk
[email protected]

[Ed. Thanks for providing this great service, Karyn!  I hope that the
index helps everyone out in going through back issues.  I'll maintain
a copy of the index for anonymous FTP on cert.sei.cmu.edu, in
pub/virus-l/archives.  Feedback on format etc. is appreciated and can
be sent to Karyn and/or to myself.]

------------------------------

Date:    Tue, 13 Feb 90 11:18:39 -0500
From:    [email protected]
Subject: VIRUS-L Index IBM PC Topics

The following is an index of the VIRUS-L Digest involving IBM PC topics
of 1990 (Volume 3).  They are referenced by Digest number.  I have
included a short description of what the article is about, and in the
cases that the description does not match the article's subject line,
I have placed the subject line in square brackets.

                          VIRUS-L Index for V3

Compiled by:  Karen Pichnarczyk
             [email protected]

Last updated: February 12, 1990
Contains V3 1 through V3 28  (January 2, 1990 - January 31, 1990)

Virus Alerts
 The Desktop Fractal Design System contains a virus  (1813 virus)
                              [Fractal Virus Alert]                   9
 Maybe not all copies of Desktop Fractal Design are infected
                              [re: Virus scanning]                   11

 Driver Disk shipped with a Wise Data Systems PC has Stoned virus    10
 Possible virus warning - text strings contain copyright messages
              for Compac Computer Corp                               14
 Orig. msg false-Desktop Fractal Design (his orig copy not
                                      contaminated)                  22
 US Gov't printing office Census disk has Jerusalem B
                                 [library virus]                     26

*************************************************************************

                     PC Virus Protection Programs

FPROT
 List of viruses it finds and description                             7
 Clarification - desc + list of viruses it checks for                11
 2 minor bugs to be fixed in next release [Requests/Questions]       19
 Devil's Dance virus FPROT string to detect it [three new viruses]   24

Flushot +
 has fast checksum checker [VIRUS-L Digest V3 #4]                     5
 Comment on its checksums - answer to above
                      [The Checksum feature of Flushot+]             27

PCData
 Free utility from PC Magazine                                       25
 Uploaded to SIMTEL 20                                               27

Virus Buster
 Virus Buster 1.10 has a bug (description)                            2

Viruscan/CLEAN/SCANRES
 SCANV53 has a bug, therefore SCANV54 corrects it [SCANV54]           3
 John McAfee describes SCANV53 problem                                5
 SCANV55 has been released (short desc) [SCANV55 and CLEANV55]        8
 Which BBS has SCANV55 and CleanV55?                                  9
 Can you get SCANxx.ARC as an AFD?                                   12
 CLEAN doesn't make checksum same as before Jerusalem B infection    21

Hard Drive Overlord
 Request for info - he heard it was similar to Mac's Gatekeeper      15

General Anti-viral info
 What's recommended to use against viruses, where do I get it, etc   26

*************************************************************************

                               PC Viruses

1260 virus
 Descr - can't use ordinary ID strings to detect it, encryption
                    Cascade virus [three new viruses]                24
 Descr - uses encryption  [4096 and 1260 viruses]                    27
 other viruses that have identical startup code: Syslock, Macho,
                                       Advent viruses                27

1813 virus  (see also Jerusalem virus)
 The Desktop Fractal Design System contains a virus
                              [Fractal Virus Alert]                   9
 How do I get rid of it?  [Desktop Fractal Design System]            10
 IBM's VIRSCAN identified it as 1813 (desc) [1812]                   10
 1813 is the Jerusalem virus                                         11
 The Desktop Fractal Design System manufacturer sent a letter
     to all registered users [Academic Press makes good!]            15
 2 articles explain what the virus does and a program to fight
      it [fractal disk infection]                                    15
 Some books get recalled too [re: Academic Press makes good!]        17
 One of Desktop Fract. Design orig thought was a virus WASN'T        22
 Public Reply - defending that at least 1 copy was not infected      24
 Which copy was infected?                                            24

4096 virus
 Descr-few public reports, but its virtually invisible
                             [4096 & 1260 viruses]                   27

8290
 from India / request for info  [8290 & Happy Birthday Jossie]        4

Advent virus
 Has similar startup code to 1260, Syslock, Macho [re: 1260 virus]   27

AIDS trojan
 Does AIDS encrypt then modify encrypt key? (Contains McAfee's
   statement about the trojan) [re: AIDS Trojan Research]             1
 Response to SWE's encryption claim (DES, DEA)
          [comments attributed to SWE]                                1
 Discussion on AIDS - a reader's opinion [AIDS Program]               1
 Only 1 company in Iceland got it  [AIDS note]                        4
 How much damage was done total?                                     10
 This is not the virus [There is more than 1 virus called AIDS!]     21

AIDS virus
 This is not the trojan [There is more than 1 virus called AIDS!]    21

Alabama
 Short comment  [4096 and 1260 viruses]                              27

Amstrad Virus
 Description of this virus  [New Viruses]                             3
 It does have something to do with Amstrad computers / contains
     name of a respected professor in Portugal                        6

DBASE Virus
 Case History of one infection  [Two Serious Cases]                   3

December 24 virus
 New one; displaying "Gledileg Jol"                                   2
 It's a variant of Icelandic Virus, some details                      2
 Description / short, variant of Icelandic  [New Viruses]             3

Devil's Dance
 Quick descr, w/ FPROT string to detect it [three new viruses]       24

Disk Killer / Ogre virus
 Request for help                                                     4

Eddie (Dark Avenger, V651)
 V651 is called Eddie-2, uses some of same techniques [V651 virus]   24

Happy Birthday Jossie Virus
 from India / request for info  [8290 & Happy Birthday Jossie]        4

Icelandic / Saratoga
 Case History of an infection  [Two Serious Cases]                    3
 December 24th is a variant of Icelandic-2  [New Viruses]             3

Israeli Boot Virus
 Other Names: "Falling Letters Boot Virus" and
       "the Swapping Virus"  [re: the missing viruses]                4

Jerusalem   (see also 1813 virus)
 How do I get rid of it without deleting programs?                    6
 Where to get Jerusalem B virus remover                               7
 What does it do/CLEAN 55 doesn't appear perfect                     21
 Found Jerusalem A - what does this do - How to get rid of it???     22
 US Gov't printing office Census disk has Jer. B [library virus]     26
 Confirmation/copy of letter they're sending out re: virus
                  [confirmation on library disk infection]           26

Macho virus
 has similar startup code to 1260, Syslock, Advent [re: 1260 virus]  27

Musician / Oropax Virus
 Its the same as Oropax from West Germany  [New Viruses]              3

Nuclear War Trojan/virus
 Has anyone heard of this? (short descr of possible trojan/virus)
                         [Posssible new virus?? NUCLEUR war]         25
 Check autoexec to see if someone just typed the msg
                          [re: Thermal Nuclear War?]                 27
 Not a virus at all   [Possible new virus followup]                  27

Pakistani Brain Virus
 How do you eliminate Pakistan C-Brain virus?                        14

Payday Virus
 Yet another variant of the Jerusalem virus  [New Viruses]            3

Perfume (765 or "4711")
 Description / it asks a question which 4711 is the answer
                                           [New Viruses]              3

Ping Pong
 found Ping Pong and Ping Pong B [Virus info Request]                23

Stoned Virus
 Stoned Virus Killer - how to get rid of the Stoned Virus             2
 History of creation and first usage [Re: viruses Rhyme and Reason]   6
 Driver Disk shipped with a Wise Data Systems PC has Stoned virus    10
 What's the impact of the "Stoned" virus?                            20
 found in LRS lab at Univ. of Guelph - what does it do/disinfectors  22
 found in his dept [virus info request]                              23
 Where to find info  6 places w/info on "Stoned"                     24

Syslock virus
 has similar startup code to 1260, Macho, Advent [re: 1260 virus]    27

V651 virus (see Eddie-2)
 full Descr incl errors made by author                               24

Vcomm
 Description / from Poland  [New Viruses]                             3

Vienna Virus  (also: VHP-648, Austrian)
 Oregon State University used M-Vienna to remove it                  13
 V651 virus similar to VHP-648 (Vienna, Austrian) [V651 virus]       24

Virus101
 "Big Brother" of virus90, descr, [Three new viruses]                24
 short comment  [4096 & 1260 viruses]                                27

W13
 Description / with two variants known  [New Viruses]                 3
 Can anyone translate text found? [Requests/Questions]               19
 Polish translation  [W13 Polish text]                               23

Yankee Doodle virus
 Request for info and a disinfectant program                          2
 Plays song at 5 pm, is memory resident [the Yankee virus]           21
 GWU infected - what to do?                                          25

Yankee virus
 Descr, NOT Yankee Doodle virus, plays every infection               21

Zero Bug Virus  (also Palette)
 Also called 1536 or Palette virus [re: the missing viruses]          4
 Can anyone confirm it is 1538 bytes? thinks it may be Zero Bug
                                 [Requests/Questions]                19
 1538 might have been a typo - Palette IS zero bug
                             [Re: Requests/Questions]                20

------------------------------

Date:    Tue, 13 Feb 90 11:19:09 -0500
From:    [email protected]
Subject: VIRUS-L Index Macintosh Topics

The following is an index of the VIRUS-L Digests involving Macintosh
topicsof 1990 (Volume 3). They are referenced by Digest number.  I have
included a short description of what the article is about, and in the
cases that the description does not match the article's subject line,
I have placed the subject line in square brackets.

                          VIRUS-L Index for V3

Compiled by:  Karen Pichnarczyk
             [email protected]

Last updated: February 12, 1990
Contains V3 1 through V3 28  (January 2, 1990 - January 31, 1990)


Virus Alerts
 after trying JCremote and MacII Diagnostic Sound, got a
                damaged resource fork.                               11
 Grammitik may contain WDEF A                                        19
 New NVIR like virus, VIREX can detect, can't identify or fix;
        Disinfectant can't find  [New virus?]                        23

*************************************************************************

Anti-Virals
 How to get Mac Anti-viral programs                                   4
 Another place to get them  [RE: Anti-virus programs]                 4
 Is this Anti-viral site available to Usenet as well as Bitnet?       6
 Is there alternate virus protection besides Vaccine & Gatekeeper?    6
 answer to alt. virus prot:  try RWATCHER  [RE: Alt. virus prot.]     7
 Eradicat'Em - place to get it (cures WDEF)   [WDEF]                  9
 1st Aid Software, Publisher of Anti-virus Kit, will do no further
               updates to s/w  [An unfortunate victim]               11

Disinfectant
 When Disinfectant is used, gets Gatekeeper violation                 5
 Want Disinfectant to use clone names too                            21
 There is NO version 1.6 yet! [Disinfectant versions]                22
 Disinfectant 1.6 has been released - descr                          27

Eradicat'Em
 Eradicat'Em - place to get it (cures WDEF)   [WDEF]                  9
 The Eradicat'Em init may be unstable - looking for proof            19
 Eradication! was unstable, good long descr of Eradicat'Em           20

Gatekeeper
      (see also "Implied Loader Virus")
 Where to get info on it?                                             3
 Possible problem with Gatekeeper Aid INIT and Finder - request
    for help  [Gatekeeper Aid Question]                               3
 Gatekeeper Aid 1.0.1 fixes Finder Bug [re: Gatekeeper Problems]      4
 When Disinfectant is used, gets Gatekeeper violation                 5
 How do you configure Gatekeeper with a Dest Scanner?                 6
 Gatekeeper Aid found a virus - user never heard of it
                  [Implied Loader 'Pack' virus]                       6
 Answer to implied Loader virus: Look for invisible file "PIC"        7
 Infection [RE: Questioning ethics at computing sites]                9
 something virus-like: Adobe Separator 20 (ADBS)
               [Gatekeeper veto: Normal Behavior or virus attack?]   27

General Topics
 How do you check for viruses if they have been Binhexed or used
   Stuffit?   [Disinfecting Binhexed Files]                           3

Implied Loader Virus
 Gatekeeper Aid found a virus - user never heard of it
                  [Implied Loader 'Pack' virus]                       6
 Answer to implied Loader virus: Look for invisible file "PIC"        7
 Brings up dangerous consequences                                    10
 some more comments - [Implied Loading and Accidental Destruction]   11

SAM
 SAM 1.4 found WDEF A [WDEF A infection followup]                    19

Scores
 Univ of Oregon has it sometimes                                     20
 Sometimes Univ Nebraska Omaha gets it [re: WDEF at U of Oregon]     23

VIREX
 VIREX can catch it, but most VIREX users don't use that option
                               [re: Apology to Mainstay Software]     3

VIRUS DETECTIVE
 descr. of odd behaviou of Virus Detective 3.0.1
      [WDEF & Virus Detective 3.0.1]                                 11

VIRUSREM
 Problem: some nodes refuse parts - [Partial VIRUSREM Package]        7

Viruses in Public Labs
 Viruses that have hit this lab - discussion                          3

WDEF
 Programs that catch/remove WDEF [Apology to Mainstay Software]       1
 VIREX can catch it, but most VIREX users don't use that option
                               [re: Apology to Mainstay Software]     3
 Eradicat'Em kills it  [WDEF]                                         9
 descr. of odd behaviou of Virus Detective 3.0.1
      [WDEF & Virus Detective 3.0.1]                                 11
 Grammatik may have WDEF A infecting it                              19
 Grammatik was infected - SAM 1.4 found it                           19
 Please supply info on what WDEF does [RE: WDEF at U of Oregon]      21
 WDEF propagates using data files [virus propogation in
                                   non-executible files]             27

WDEF sightings
 Another infection [WDEF A]                                           8
 Infection [RE: Questioning ethics at computing sites]                9
 found in Miami University in Oxford, Ohio                           11
 found in Trinity College, Dublin, Ireland                           11
 found in U. of North Carolian at Chapel Hill                        13
 found in Arizona State Univ - what was done to remove it            13
 found at Univ. of Oregon, also found NVIR A&B, jerusalem, PingPong  15
 found at Univ of Manitoba - Winnipeg, Canada                        19
 found at Univ of Oregon in 10 machines                              20
 found at Clemson Univ                                               22
 found at Cambridge 22 Jan                                           23
 found at Univ of Nebrasks Omaha                                     23
 found at Washington State Univ.                                     23
 twice found at a national copy center chain, also a univ bookstore
                                           [WDEF in public places]   23
 found at Humboldt State U, CA.                                      24
 found at Univ. of South Carolina                                    25
 WDEF B found at Univ of Rochester                                   25
 Found at Univ of Central Florida                                    25
 WDEF A found at Connecticut college                                 27
 WDEF A found at Univ. of Miami                                      27

------------------------------

Date:    Tue, 13 Feb 90 11:21:07 -0500
From:    [email protected]
Subject: VIRUS-L Index Miscellaneous Topics

The following is an index of the VIRUS-L Digests involving topics other
than Macintosh or IBM PC of 1990 (Volume 3).  They are referenced by
Digest number.  I have included a short description of what the article
is about, and in the cases that the description does not match the
article's subject line, I have placed the subject line in square brackets.

                          VIRUS-L Index for V3

Compiled by:  Karen Pichnarczyk
             [email protected]

Last updated: February 12, 1990
Contains V3 1 through V3 28   (January 2, 1990 - January 31, 1990)

                  Anti-Viral Archives for all computers

  Latest copy                                                         5
  Introduction to anti-viral archives                                28
  Latest copy  (January 31, 1990)                                    28

*************************************************************************

Files to Download
 Directions how to FTP from BITNET [Bitnet *can* FTP now]            16
 Files added to MIBSRV.MIB.ENG.UA.EDU  [New files]                   16
 Bitnet files now on SIMTEL-20                                       19
 Files added to MIBSRV                                               26

Uploads to SIMTEL20:
 Uploaded Dirty Dozen List #9C to MSDOS.TROJAN.PRO                    2
 SCANV54 has been uploaded                                            8
 SCANV55 & CLEANP55 uploaded                                         15
 SCANV56, et al - uploaded                                           17
 BITNET files on SIMTEL20                                            19
 PCData files (from PC Magazine) have been uploaded                  27

*************************************************************************

                          VAX Topics (VAX/VMS)

Possible virus?
 Is there a virus on VAX? [UNCONFIRMED virus on Vax]                 19
 Response: person is a potential virus author [re: virus request]    23
 Comment: yes, we should track potential virus authors
                        [security and Internet Worms]                25
 Requestor of virus info (V3 #19) may lose access to UMNEWS/UMBB
                            Policy  [VAX virus request and UMNEWS]   25
 Thinks orig. requestor was a user, not potential writer/comment
                                    on Bill of Rights                25
 Thinks originator committed an English language blunder
                    [re: "Virus request" from Taiwan]                25
 Comment: people should be able to responsibly give virus code to
                          people  [re: virus request]                26

*************************************************************************

                              AMIGA topics

VIRUSX
 Correction: a version may be a trojan - discussion                   1

XENO virus
 Help! I'm hit - what do I do?  desc of virus and infection          13

*************************************************************************

                              Atari topics

 Does anyone know of a virus that causes a head crash?                9

*************************************************************************

                             Network Topics

 Some viruses can spread over a network - how they do it
     [Network Server Infections]                                      2

*************************************************************************

                     Discussions and Points of View

Bank ATM cards   (see also Morris Trial)
 Phone-in-credit-purchase industry/ATM cards you tell bank your
                  password (PIN)  [re: Trial & Double Standard]      23
 The PW is not stored on the card                                    26

Book Reviews
 Review of "The Cuckoo's Egg"                                         3
 Review/overview of "Computer Viruses: Dealing w/Electronic
                Vandalism & Programmed Threats" [ADAPSO virus book]  25
 Saw a good review of the "Cuckoo's Egg" in Smithsonian Mag
                                      [Article on Cliff Stoll]       25
 Comment on misprint in Review   [re: ADAPSO virus book]             27

Biological vs computer viruses
 General Discussion   [virus data collection]                         3
 A biologist speaks on the subject [virus biological analogy]         4
 Request for references on this topic
         [Biological analogy source requested]                       12
 Reference given [Re: Biological references requested]               13
 LP's have >1 groove-example given [re: practical a-priori viruscan] 23

Checksum Algorithm Discussion (see Signature Programs)
 Discussion of various authentication/signature/checksum algorithms   4
 Answer    [Uses of Macs against Viruses]                             5
 Another Answer (comment on Flushot+) [VIRUS-L Digest V3 #4]          5
 Further Discussion of RSA, etc.                                      6
 Questions to ponder                                                  8
 Comments on Checksums in general, using Flushot+ as an example
                        [the checksum feature of FLU_SHOT+]          27

Computer Ethics
 Discussion on ethics of not informing users that a virus is
    present on public computers in general usage                      6
 Advice [RE: Questioning ethics at computing sites]                   7
 The univ was not ignoring it (explanation of action taken)
                  [RE: Questioning ethics at computing sites]         9
 Guidelines to reduce chance of propogating viruses
        [Organizational attitudes about virus protection]            11
 An ethical code like medical code should apply to programmers       15
 What is appropriate punishment [re: ethical judgement on the worm]  16
 Moral/ethical comments (long)                                       17
 Dispute the article in ethics                                       18
 comment on societial norms vs normal computing practices (long)
                                  [Trial and Double Standard]        22
 Professional responsibility where merchant doesn't remedy
                 situation?   [WDEF in Public Places]                23
 What they do to protect a "public" MAC
                             [Public PC lab responsibility]          26

Conferences
 Call for Papers - 13th Nat. Computer Security Conference (long)      1
 Call for speakers - MIS 10th Annual Conference on Control,
        Audit & Security of IBM Systems                               9

DES
 Helsinki Univ. has a separate implementation that can be
    anonymous FTP'd    [re: DES Availability]                         1
 Discussion on DES/DEA; reply to letter submitted by SWE - cracking
    DES is harder than SWE says   [Comments Attributed to SWE]        1
 A W. German DES is available named PC-DES                            4

Morris Trial
 Jurors selected who had no computer knowledge                       12
 comment on non-technical jurors                                     13
 an article [New York Times on the Morris trial]                     14
 it is fair to use non-techie jurors                                 14
 more comments on jurors                                             14
 someone's experience as a juror                                     14
 enjoy hearing about the trial on VIRUS-L                            15
 I've been on jury duty                                              15
 An ethical code like medical code should apply to programmers       15
 in defense of computer literate juries                              16
 more comments                                                       16
 news of the trial - convict him!                                    16
 What is appropriate punishment [re: ethical judgement on the worm]  16
 Lawyers want people without education on a jury                     17
 From a witness - views on the jury                                  17
 Fact is- he did release the worm                                    17
 Fed. law for punishment/can't stop him from getting a computer job  17
 Moral/ethical comments (long)                                       17
 comment on hiring Morris                                            17
 (All articles in #18 are on this topic)
 Anything in trial supports the >1 author concept?                   18
 This forum says guilty!                                             18
 Comments on jury and irresponsibility of Morris                     18
 Morris infected AT&T Bell in high school                            18
 Dispute the article in ethics                                       18
 Give him "public service in the field of computing"???              18
 In defense of educated unemployed, homemakers&retired people        18
 the verdict                                                         18
 Correction/comment on judge, sentencing is Feb. 27                  19
 Comment on AT&T breakin - [Morris hacking Incidents]                20
 What judicial process said he released the worm (disputes V3 #17)
                                        [Innocent until proven...]   20
 factually guilty vs legally guilty                                  21
 Excerpts from an AP article  [Morris found guilty]                  21
 Morris had testified he did it.                                     21
 Nothing in trial supports >1 person BUT Morris didn't write the
                           password cracking code                    22
 comment on societial norms vs normal computing practices (long)
                                  [Trial and Double Standard]        22
 Why didn't Morris try to help the Internet group stop it?           23
 Phone-in-credit-purchase industry/ATM cards you tell bank your
                  password (PIN)  [re: Trial & Double Standard]      23
 How do I get a copy of Spafford's report?                           24
 Morris did try to stop worm, but was too late                       25
 according to papers, morris conceded he WAS responsible for
                 worm  [re: innocent until...]                       26

Shrink-wrap Software
 How to copyright shrink-wrap software / legalities
        [re: shrink-wrap Licenses]                                    4
 I thought shrink wrapped s/w was safe?!                              9
 3 steps to safe s/w                                                 10
 Retailers can re-shrinkwrap s/w                                     10
 Retailers perhaps use tamper-resistant packaging like Tylenol?      11
 Get in habit of scanning everything - stores re-wrap and
        commercial distributers sometimes have viruses               11
 Stores don't do virus checks on returned S/W (case history)         11
 Retailers have a "Trial/Return" policy for S/W                      11
 Vendors can sell s/w on write-protected diskettes                   12
 Steps a vendor can take to make sure returned s/w is virus-free     12
 Some vendors do sell s/w on write-protected diskettes               12
 Comment on vendor sell write-prot. s/w [Protecting s/w
                       from contamination]                           12
 In the UK they rarely see shrink-wrap; retailer won't demo          12
 Someone determined can write on a write-protected disk              13
 Most software comes write-enabled                                   13
 Most infections are by the well-intentioned                         14
 You do want to deal with retailers with a return policy             14
 Answer from someone who works in a store [re: some more thoughts
                           on shrink-wrapped software]               14
 Suggest that vendors w/ write prot. disks note that fact on disk    14
 Stores can *simply* do a sector-by-sector, byte-by-byte compare
                    of returned software                             15
 Why not just run a good virus checker?                              15
 If someone really wanted to infect a write-prot. disk, they could   15
 Dispute V3 #15 (*simply*)                                           20
 Trivial to tweak a drive to think a disk is writable - S/W not
                             factory write-protected                 21
 If S/W is returned, store ships disks to vendor, vendor ships
                                    clean disks to store             24

Signature Programs
 glad to hear people are concerned                                   22
 detailed dispute to RADAI'S comments                                22
 Analysis found useful                                               22
 Brief summary of Bosen's opinions                                   22
 Where get descr of ISO 8731-2?                                      24
 It takes more time to do then is acceptible (long)                  24
 Sophistated algorithms are NOT inherently superior to less soph.    24
 Clearing up misconceptions                                          26

Spafford's Theorems
 Comment on general viral information                                 1
 more comments                                                        3
 more  [WHM on Spafford's theorems]                                   4
 comment                                                              4
 Dispute V3 #1  [RE: comment by William Hugh Murray]                  6
 More discussion of V3 #1  [RE: Spafford's Theorems]                  6
 Another reply to WHMurray                                            6
 A comment on the Dispute [public trust vs viruses]                   7
 Another comment on the Dispute [Virus Scare & Backups]               7

Virus Trends (also: Faxes on PC's)
 Correction on topic that a version of VIRUSX may be a trojan         1
 New attack methods - text files, mail, postscript, fax, C++          3
 more opinions                                                        3
 a short comment                                                      4
 PC Fax Boards have async & bisync modem capability                   5
 Discussion of how PC Fax boards can transmit viruses                 6
 Concievable to embed a virus in a postscript font; also, VIDEO
      cyphers are viruses of a sort                                   6
 What FAXes on PC's can do                                            7
 comment on Postscript fonts [RE: shrink wrap...still safe?]         11

Viruses Rhyme and Reason Discussion
 Viruses Rhyme and Reason - discussion of mindset of writers          2
 Comment on how the author of the "Stoned" virus created it           6

Theoretical Virus Scanning
      (incl: Comments on article in "American Mathematical Monthly")
 Descr. of article in a periodical: "no completely safe computer
    virus test is possible"  [An interesting article]                 9
 Comment on article  [re: virus scanning]                            11
 A proof a la Cohen if a program P1 is a virus....                   13
 Dispute of the proof (or extension of the proof?)                   15
 Dispute of the dispute  [Universal virus scan]                      17
 Theory and real-life don't match                                    17
 Nothing is 100% accurate/also memory protection architechtures      19
 Additional info on proof                                            19
 the halting problem proves that proofs don't work                   20
 In defense of proofs                                                20
 Antithesis of proofs and halting problem                            20
 Either its a virus or it may be a virus                             21
 Proof is: if it's suspecious, don't load it.                        21
 Can't detect viruses that haven't emerged / indecidable if a virus
                     can determine if a prog is a checker program    22
 Dispute / comments                                                  22
 Halting problem comments                                            23
 Is it possible to come up with a universal virus detector?
                                       [virus modeling]              23
 simply check all executibles sizes / Has a copy of program that
              does this.    [W13 Polish text]                        23
 3-page definition of the term "virus"                               24
 Those proofs are irrelevant-can trivally detect viruses thru H/W    25
 Don't understand Leichter-propose "last changed" stamp              27
 can't simply check exec's-WDEF is an ex. of data files propogating
                viruses [virus propogation in non-executable files]  27

General Topics
 Tracking infections - presentation of possible discussion base       1
 Questions about Virus-L from a new reader                            1
 Don't use progs you can't trust [Do not use this diskette]           1
 Using ASCII 255 to conceal presence of a directory                   1
 Virus researcher's copy of virus shows up in a variant of the
    Icelandic and Dbase virus   [Two Serious Cases]                   3
 Viruses in Bulgaria - he can supply info on some listed viruses     13
 2 new topics - vaccine for errors?; can failed LISTSERVERS make
       networks collapse?  [re: spool..bug or virus,...]             15
 McAfee included top 100 influential leaders in computer industry    15
 Thank-you Usenet folks!                                             20
 Whats the difference between virus and worm?                        21
 Need help in preparing doc on viruses / How to protect public
             access cluster?   [virus info request]                  23
 Answer difference between virus and worm                            24
 Why doesn't someone run an MSDOS emulator in a MSDOS machine?
               [Prophylactic anti-viral suggestion]                  25

------------------------------

End of VIRUS-L Digest
*********************
Downloaded From P-80 International Information Systems 304-744-2253