The 'Security Digest' Archives (TM)

Archive: About | Browse | Search | Contributions | Feedback
Site: Help | Index | Search | Contact | Notices | Changes

ARCHIVE: 'Phage List' - Archives (1988 - 1989)
DOCUMENT: phage #048 [Disassembled virus?] (1 message, 828 bytes)
NOTICE: recognises the rights of all third-party works.


From: [email protected] (Steven D. Miller)
To: phage
Date: Sat 09:30:10 05/11/1988 EST
Subject: Disassembled virus?
References: [Thread Prev: 410] [Thread Next: 050] [Message Prev: 130] [Message Next: 053]

   Now that MIT and perhaps others have disassembled the virus objects,
could they make them available to others somehow?  Are they already
available, and did I just miss that piece of mail in the rush?  Do people
feel that general distribution of the main virus/worm pieces is a bad idea,
due to their potentially explosive nature?

   It now looks like two of our machines were infected after all, but we
didn't notice any particularly abberant behavior during the time at which
they should have been infected, and I'm trying to figure out why this
beastie seems to have made it in, but was unable to do anything beyond that.
(For all I know, it was doing its song-and-dance, but the increase in system
load was cleverly camoflauged by the worm's taking over the minds of some
people here and forcing them to send a whole pile of messages out on some
mailing lists they moderate...  I would like to know for sure, though.)


Spoken: Steve Miller    Domain: [email protected]    UUCP: uunet!mimsy!steve
Phone: +1-301-454-1808  USPS: UMIACS, Univ. of Maryland, College Park, MD 20742