Menu

LISTSERV List Owners' Forum


View:

Message:

[

First

|

Previous

|

Next

|

Last

]

By Topic:

[

First

|

Previous

|

Next

|

Last

]

By Author:

[

First

|

Previous

|

Next

|

Last

]

Font:

Proportional Font


Subject:

Re: GAME2 MODULE

From:

Murph Sewall <[log in to unmask]>

Reply-To:

Valdis Kletnieks <[log in to unmask]>

Date:

Thu, 17 Jan 91 14:21:34 EST

Content-Type:

text/plain

Parts/Attachments:

Parts/Attachments

text/plain (27 lines)

Good advice, for more reasons than simply supressing propagation of
virusware.
----------------------------Original message----------------------------
On Wed, 16 Jan 91 08:59:57 TUR you said:
>Sorry for the cross postings.. A new virus is detected. The name is
>GAME2 MODULE sometimes seen as TERM MODULE..
>Our system got it from TRMETU and it seems that it is distributed
>by a LISTSERV.
 
The identification of LISTSERV as a vector for this worm is partially
a red herring.  What happens is this:
 
A user runs the worm.  If he happens to have a nickname in his NAMES
file that points at a Listserv mailing list, it will send a copy to
the list address.
 
Listserv then receives the file, and if the list is set up with the
'Files = Yes' attribute, it distributes the file to the list.
 
Moral of the story:  All Listserv managers should carefully evaluate
the need for 'Files = Yes' on their lists.
 
 
                                  Valdis Kletnieks
                                  Computer Systems Engineer
                                  Virginia Polytechnic Institute

Top of Message | Previous Page | Permalink


ATOM RSS1 RSS2