Bugtraq mailing list archives

Re: Possible virus from Rome labs

From: spaf () cs purdue edu (Gene Spafford)
Date: Wed, 30 Mar 94 22:56:30 -0500


I don't suppose any of the effected systems was covered by Tripwire?
If there was a real virus (or other trojan type activity), Tripwire
would expose what files were altered....

If any of the systems are Suns, it would help to run the md5check
software from the CIAC & CERT, assuming the systems weren't running
Tripwire (or ATP or Fortress etc.).

--spaf

Current thread:

Possible virus from Rome labs Ron Gilmer (Mar 30)
- Re: Possible virus from Rome labs Ben Jackson (Mar 30)
- Re: Possible virus from Rome labs Steve Simmons (Mar 30)
  - Re: Possible virus from Rome labs Evil Pete (Mar 30)
    - Re: Possible virus from Rome labs Aggelos D. Keromitis (Mar 31)
- Re: Possible virus from Rome labs Gene Spafford (Mar 30)
- <Possible follow-ups>
- Re: Possible virus from Rome labs William McVey (Mar 30)
- Re: Possible virus from Rome labs scott () santafe edu (Mar 30)