The 'Security Digest' Archives (TM)

ARCHIVE: 'Phage List' - Archives (1988 - 1989)
DOCUMENT: phage #048 [Disassembled virus?] (1 message, 828 bytes)
SOURCE: http://securitydigest.org/exec/display?f=phage/archive/048.txt&t=text/plain
NOTICE: securitydigest.org recognises the rights of all third-party works.

START OF DOCUMENT

From: steve@umiacs.UMD.EDU (Steven D. Miller)
To: phage
Date: Sat 09:30:10 05/11/1988 EST
Subject: Disassembled virus?
References: [Thread Prev: 410] [Thread Next: 050] [Message Prev: 130] [Message Next: 053]

   Now that MIT and perhaps others have disassembled the virus objects,
could they make them available to others somehow?  Are they already
available, and did I just miss that piece of mail in the rush?  Do people
feel that general distribution of the main virus/worm pieces is a bad idea,
due to their potentially explosive nature?

   It now looks like two of our machines were infected after all, but we
didn't notice any particularly abberant behavior during the time at which
they should have been infected, and I'm trying to figure out why this
beastie seems to have made it in, but was unable to do anything beyond that.
(For all I know, it was doing its song-and-dance, but the increase in system
load was cleverly camoflauged by the worm's taking over the minds of some
people here and forcing them to send a whole pile of messages out on some
mailing lists they moderate...  I would like to know for sure, though.)

	-Steve

Spoken: Steve Miller    Domain: steve@mimsy.umd.edu    UUCP: uunet!mimsy!steve
Phone: +1-301-454-1808  USPS: UMIACS, Univ. of Maryland, College Park, MD 20742

END OF DOCUMENT