--------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00009 Date: 04/06/97 From: MARKUS THIELMANN Time: 12:00am \/To: SCOTT HOFFMAN (Read 0 times) Subj: Hoax virus warnings, SH> "E-Mail viruses" [...] Of course, a lot of your thoughts are interessting and correct. But when you ask "What's e-mail ?", then you have to ask "What's a virus ?". A virus is a program, which is able to spread itself, without the help of it's "host", which means the program it infects. What you described is -of course- right, but it isn't a virus, it's a worm. BTW: you've got the chance to test it. Use MSWord as your mailreader ;-) --- * Origin: mt@donut.de (2:2435/708.11) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00010 Date: 04/06/97 From: KURT WISMER Time: 08:54am \/To: PAUL WALKER (Read 0 times) Subj: Re: VIRUSES -=> Mocking Paul to Andreas <=- (Mock, mOck, moCk, mocK) AM> And what's about companion viruses? It is as easy as writing PW> Not really - for starters, I don't know of a pascal compiler that PW> creates com files. If you don't have one of those, you have to write a PW> virus which drops a .COM file which contains a fully working version PW> of the virus. PW> Not impossible, but certainly more hassle than it's worth. Gimme PW> assembler any day. paul, did you consider the possibility of writing it as an exe file and then simply renaming to a com extension?... companion viruses work because dos sees them in the directory as com files, i don't think they actually need to be com files internally... ... wash, rinse, repeat... --- Maximus 2.02 * Origin: Virus Watch BBS ,[(416)654-3814] (1:250/503) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00011 Date: 04/06/97 From: KURT WISMER Time: 09:03am \/To: RICHARD ST. JOHN (Read 0 times) Subj: Re: Internet Dialing Tro -=> Mocking Richard to Tim <=- (Mock, mOck, moCk, mocK) TB> Have also heard about this one, apparently it changes your dialup TB> number to one in Russia and does not tell you about it. The result is TB> that you get a very expensive phone bill. It cannot connect your modem TB> to the server itself though. RSJ> How would this work. My dialup number is displayed in the ATDT line RSJ> every time {I use Winsock at home} and the RAS Dialer in NT at work. it does work and it was real, however, it was an attack against a specific peice of software... consider the possibility that you don't use that software... RSJ> More info please, if you have it. it's the trojan horse program discussed in this echo not too long ago that changes the number your dialer program dials to an isp in moldavia (i have no idea how to spell the place properly)... it was hidden in a program that the user was told would do something s/he wanted (display some movie format file in realtime over the net, i think) and so the users would install it and bad things would happen with their phone bill afterwards... there are a heap of conditions required for it to work and go unnoticed (like you have to be in zone 1, have an internal modem, be using the right software, etc)... ... don't scan this tagline, it has the 141$FLU... --- Maximus 2.02 * Origin: Virus Watch BBS ,[(416)654-3814] (1:250/503) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00012 Date: 04/06/97 From: MIKE SIMM Time: 02:03pm \/To: PAUL WALKER (Read 0 times) Subj: VIRUSES -> Not really - for starters, I don't know of a pascal compiler that -> creates com files. If you don't have one of those, you have to write -> a virus which drops a .COM file which contains a fully working -> version of the virus. If u rename exe to the com extension they still work. --- PCBoard (R) v15.3/M 5 * Origin: (1:250/350) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00013 Date: 04/06/97 From: RUNE-KRISTIAN VIKEN Time: 09:12pm \/To: KURT WISMER (Read 0 times) Subj: No more Mister Nice > .. until someone can prove that hardware destroying viruses exist... I think I've proven that those exist before.. ;-) You see, if a virus REALLY pisses a person with a REALLY bad temper.. he might just hammer his fist into his computer.. and there we are.. 'hardware destroying viruses' ;-) In other forms than that?? Nope -> Impossible. Rune Kristian Viken, aka Fifth Arcade^RaP'97. SysOp at Arcade's BBS E-Mail: arcade@bristol.fix.no; oBTW: Try out Arcade's BBS & YouthNet -- SPEED 2.00 [NR]: E=mc - Einstein --- FidoMBBS v1.89, NEP#002 * Origin: - Neptun BBS - #+47 32700719 - MBBS - (2:210/20.24) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00014 Date: 04/06/97 From: RUNE-KRISTIAN VIKEN Time: 09:12pm \/To: KRISTOPHER YOUNG (Read 0 times) Subj: VIRUS WARNING!!!! > ****ENGLISH**** > This is an important virus warning. Please share it to all people that have > access to the internet. Am I tired of this? Or am I tired of this? Pick one out of two correct answers. ;-> I just *hate* hoaxes.. Rune Kristian Viken, aka Fifth Arcade^RaP'97. SysOp at Arcade's BBS E-Mail: arcade@bristol.fix.no; oBTW: Try out Arcade's BBS & YouthNet -- SPEED 2.00 [NR]: Why don't you call Arcade's BBS today? (38 35 12 88) --- FidoMBBS v1.89, NEP#002 * Origin: - Neptun BBS - #+47 32700719 - MBBS - (2:210/20.24) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00015 Date: 04/06/97 From: RUNE-KRISTIAN VIKEN Time: 09:12pm \/To: STEVE BENNETT (Read 0 times) Subj: COOKIE > Since obviously ID4 had such great computer experts at their disposal, > you wonder why their computer knowlege on viruses was so crap... Easy to answer. It wasn't a virus-education movie. ID wasn't made with a good plot, it was made with special effects, and ONLY that. Plain and simple. Rune Kristian Viken, aka Fifth Arcade^RaP'97. SysOp at Arcade's BBS E-Mail: arcade@bristol.fix.no; oBTW: Try out Arcade's BBS & YouthNet -- SPEED 2.00 [NR]: Everyone who kills is a killer! Kill all killers! --- FidoMBBS v1.89, NEP#002 * Origin: - Neptun BBS - #+47 32700719 - MBBS - (2:210/20.24) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00016 Date: 04/06/97 From: RUNE-KRISTIAN VIKEN Time: 09:12pm \/To: KURT WISMER (Read 0 times) Subj: Thanks Man > nov 11, 1983 - fred cohen demonstrated the first computer virus in his > comp.sec. class at usc... later study of the concept with his prof. > leonard adleman (the a from rsa) resulted in the term "computer virus" > being coined (by the aforementioned prof.)... Well, according our book in 'information technology' (thats "computing") in school (I'll translate from norwegian, as well as I'm capable of): "Computer viri started as innocent 'games' " (I couldn't find a better rd). In 1949 the computer pioneer John von Neumann presented a modell of a virus program. In his work "Theory and organization of Complicated Autmata" he made the theory of a computer program capable of reproducing. He was not taken seriously by his readers... the computer (read: "advanced computeres like those today") didn't exist yet. 10 years later, three young genouses, H. Douglas McIlroy, Victor Vysottsky and Robert Morris, was seated at the super-machines of the time at AT&T's Bell Labs. They understood Neumanns theories, and they arranged "Core Wars", pure cock-fights between their programs. They made programs that should reproduce and destory the opponents program, and when the battle was over, they deleted the programs and went home for the day. No damage was done, and their employer loved their enthusiasm for computers outside work-hours. The 'games' spread 'underground' in other high-tech laboratories. They competed to make the 'strongest' program. Suddenly "the bubble broke" (It was revealed). Ken Thompson, known for making Unix, got a price for revealing how to make a computer viri. He recomended those who listened to his speach to try the same. And they did. Scientific American brought the information further and offered their readers the detailed instructions sent to them for two dollars. [...] I dunno who's right. My book (used in school) or you(?) Rune Kristian Viken, aka Fifth Arcade^RaP'97. SysOp at Arcade's BBS E-Mail: arcade@bristol.fix.no; oBTW: Try out Arcade's BBS & YouthNet -- SPEED 2.00 [NR]: Kl sk y r st vel, Kl sk y r l r.. (eller noe s nt?:-) --- FidoMBBS v1.89, NEP#002 * Origin: - Neptun BBS - #+47 32700719 - MBBS - (2:210/20.24) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00017 Date: 04/07/97 From: THOMAS HAUKEBERG Time: 05:04am \/To: ALL (Read 0 times) Subj: virus scanners. Hmm, can anyone tell me who's the best virus scanners and the ftp adress to it like this : ftp://ftp.virus.com/pub/virscan/file.1 on the tils i need? choz@fix.no --- BBBS/L v3.33 How-D * Origin: Fluxpod Information eXchange, telnet://fix.no (2:210/30) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4C00018 Date: 04/06/97 From: RICK COLLINS Time: 09:07pm \/To: SCOTT HOFFMAN (Read 0 times) Subj: Hoax virus warnings, -=> Quoting Scott Hoffman to Todd Copeland <=- -=> FidoMail to 1:163/215, please.-=< TC> and confusion. Again, for the record: That is *** NOT *** READING TC> E-mail! It's running code, period! I can READ that SAME code and TC> *NOTHING* will happen! sh> Well, I see your point, in a vague way but it makes no sense to sh> me. READING E-MAIL rEQUIRES without question the launching of a sh> program. You cannot run software without launching some sort of sh> code be it a BBS program which handles it internally or a sh> seperate e-mail program. That's _right_ Scott. Now tell me: _Why_ would a program designed and intended to read and display text suddenly decide that was boring, and _instead_ look for "executable code" in that text, and load it an execute it? _Why_ would it do that? . sh> Like I said, "reading" as you are phrasing it, only exists on a sh> piece of paper. whenevr ASCII is run through a computerm, sh> computer processes are executed to display it on the screen. sh> In many pieces of computer software the person isnt the only one sh> who "reads" the messsages. Many times software programs will sh> also "read" the message as it is displayed. The program looks sh> for special commands (like in BBS software you have "MCI codes" sh> or on UNIX you can have a mail program that runs "scripts". And _only_ if the software is _intended_ to so that, Scott. You are postulating a "virus" contained in an E-mail that any program designed to display and process text will execute. It ain't gonna happen. TTFN. Rick. Ottawa, ON 6 Apr 21:11 --- Blue Wave/DOS v2.20 * Origin: BitByters BBS, Rockland ON, Can. (613)446-7773 v34, (1:163/215)