X-Message-Index: 033
X-Message-Prev: 031
X-Message-Next: 393
X-Thread-Prev: 029
X-Thread-Next: 030
From: Eric S. Johnson <esj@manatee.cis.ufl.edu>
To: phage
X-To: phage, esj@manatee.cis.ufl.edu
Subject: Re: initial portion of virus and how to catch the rest
Date: Fri, 04 Nov 88 13:22:04 -0500
X-Date: Fri 13:22:04 04/11/1988 EST


I caught a binary named 'sh'. Xor'ing it with 0x81 proves most
interesting..(Thanks Keith!)  Anyone figured out why the internet
address of ernie.berkeley.edu is in there?

--Ej