The 'Security Digest' Archives (TM)

ARCHIVE: 'Phage List' - Archives (1988 - 1989)
DOCUMENT: phage #024 [virus at umich came from mitvma.mit.edu ?] (1 message, 730 bytes)
SOURCE: http://securitydigest.org/exec/display?f=phage/archive/024.txt&t=text/plain
NOTICE: securitydigest.org recognises the rights of all third-party works.

START OF DOCUMENT

From: Edward Vielmetti <emv@starbarlounge.cc.umich.edu>
To: phage
Date: Fri 09:14:33 04/11/1988 EST
Subject: virus at umich came from mitvma.mit.edu ?
References: [Thread Prev: 022] [Thread Next: 026] [Message Prev: 026] [Message Next: 108]

I was watching the virus when it hit umix at 1 am yesterday, and managed
to clean it up mostly by accident at that time.  Unfortunately I'm too
much of a nitwit to have done anything about it then, live and learn.

When I was in the process of fixing up umix, though, I also killed off
all incoming SMTP connections, and as I recall there were a number of
incoming calls from mitvma.mit.edu that I had to blast.  Fortunately
umix is slow and creaky enough that it queued some of the messages
rather than taking them directly.

This could have been a blast of bitnet mail from the interbit
gateway at mit as well, I wouldn't rule that out.

I hesitate to mention this because I don't have a log to prove it,
that's my one concern here.

--Ed
Edward Vielmetti, U of Michigan computing center mail group

ps. I'll be at 1-800-66-MERIT for at least part of today -
it's the Merit/NSFnet network operations center.

END OF DOCUMENT