From: AITGW::"VIRUS-L@IBM1.CC.LEHIGH.EDU" 12-AUG-1991 15:14:00.46
To: Multiple recipients of list VIRUS-L <VIRUS-L@LEHIIBM1>
CC:
Subj: VIRUS-L Digest V4 #139
Received: by AITGW.DECnet (utk-mail11 v1.5) ; Mon, 12 Aug 91 15:14:22 EDT
Received: from IBM1.CC.Lehigh.EDU by aitgw.ge.com (5.61/GE Gateway 1.3)
id AA23733; Mon, 12 Aug 91 15:14:07 -0400
Message-Id: <9108121914.AA23733@aitgw.ge.com>
Received: from LEHIIBM1.BITNET by IBM1.CC.Lehigh.EDU (IBM VM SMTP R1.2.2MX) with BSMTP id 3543; Mon, 12 Aug 91 15:08:37 EDT
Received: from LEHIIBM1.BITNET by LEHIIBM1.BITNET (Mailer R2.08) with BSMTP id
1539; Mon, 12 Aug 91 15:04:41 EDT
Date: Mon, 12 Aug 1991 14:44:01 EDT
Reply-To: VIRUS-L@IBM1.CC.LEHIGH.EDU
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1.BITNET>
From: "The Moderator Kenneth R. van Wyk" <krvw@CERT.SEI.CMU.EDU>
Subject: VIRUS-L Digest V4 #139
Comments: To: VIRUS-L@IBM1.CC.LEHIGH.EDU
To: Multiple recipients of list VIRUS-L <VIRUS-L@LEHIIBM1>
VIRUS-L Digest Monday, 12 Aug 1991 Volume 4 : Issue 139
Today's Topics:
Introduction to the Anti-viral archives, listing of 07 August 1991
Archive access without anonymous ftp, last changed 30 June 1991
Brief guide to files formats, last changed 30 June 1991
Amiga Anti-viral archive sites, last changed 30 June 1991
Apple II Anti-viral archive sites, last changed 30 June 1991
Atari ST Anti-viral archive sites, last changed 30 June 1991
Anti-viral Documentation archive sites, last changed 10 July 1991
IBMPC Anti-viral archive sites, last changed 30 June 1991
Macintosh Anti-viral archive sites, last changed 30 June 1991
Unix Anti-viral and security archive sites, last changed 30 June 1991
VIRUS-L is a moderated, digested mail forum for discussing computer
virus issues; comp.virus is a non-digested Usenet counterpart.
Discussions are not limited to any one hardware/software platform -
diversity is welcomed. Contributions should be relevant, concise,
polite, etc. Please sign submissions with your real name. Send
contributions to VIRUS-L@IBM1.CC.LEHIGH.EDU (that's equivalent to
VIRUS-L at LEHIIBM1 for you BITNET folks). Information on accessing
anti-virus, documentation, and back-issue archives is distributed
periodically on the list. Administrative mail (comments, suggestions,
and so forth) should be sent to me at: krvw@CERT.SEI.CMU.EDU.
Ken van Wyk
----------------------------------------------------------------------
Date: Wed, 07 Aug 91 10:38:26 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Introduction to the Anti-viral archives, listing of 07 August 1991
Introduction to the Anti-viral archives, listing of 07 August 1991
This posting is the introduction to the "official" anti-viral archives
of VIRUS-L/comp.virus. With the generous cooperation of many sites
throughout the world, we are attempting to make available to all
the most recent news and programs for dealing with the virus problem.
Currently we have sites for Amiga, Apple II, Atari ST, IBMPC, Macintosh
and Unix computers, as well as sites carrying research papers and
reports of general interest.
If you have general questions regarding the archives, you can send
them to this list or to me. I'll do my best to help. If you have a
submission for the archives, you can send it to me or to one of the
persons in charge of the relevant sites.
If you have any corrections to the lists, please let me know.
The files contained on the participating archive sites are provided freely
on an as-is basis.
To the best of our knowledge, all files contained in the archives are either
Public Domain, Freely Redistributable, or Shareware. If you know of one
that is not, please drop us a line and let us know. Reports of corrupt
files are also welcome.
PLEASE NOTE
The Managers of these systems, and the Maintainers of the archives, CAN NOT
and DO NOT guarantee any of these applications for any purpose. All possible
precautions have been taken to assure you of a safe repository of useful
tools.
Jim Wright
jwright@cfht.hawaii.edu
JWRIGHT@UHCFHT
------------------------------
Date: Wed, 07 Aug 91 10:38:56 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Archive access without anonymous ftp, last changed 30 June 1991
Archive access without anonymous ftp, last changed 30 June 1991
To get files from the anti-viral archives, you do not need access
to anonymous ftp. (However, anonymous ftp is generally the preferred
method.) Below is information on accessing the archive sites using
only email.
-=-
One way to get access to the archives is through the BITFTP server
at Princeton. Send a message to the BITNET address is BITFTP@PUCC
with the body of the message containing the single word HELP. This
should get you more information, and give you access to any archive
site on the Internet. Due to excessive loads, this service has been
restricted to BITNET and EARN sites only. UUCP sites need not apply.
-=-
Both the AppleII and the Atari ST archives have mail servers which
provide access to their archives. You may receive automatic updates
of Macintosh anti-viral programs via email. See the individual articles
on these sites.
-=-
You may also retrieve files from the SIMTEL-20 and the INFO-MAC
archives by using one of the many mail servers which maintain
a shadow archive of these sites. Send the following message to one
of the listserv sites.
help
See the IBMPC and Macintosh articles for a complete list of servers.
------------------------------
Date: Wed, 07 Aug 91 10:39:28 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Brief guide to files formats, last changed 30 June 1991
Brief guide to files formats, last changed 30 June 1991
-- The most recent copy of the complete text may be anonymous ftp'd --
-- from ux1.cso.uiuc.edu (128.174.5.59) in the directory doc/pcnet. --
-- That file is maintained by David Lemson (lemson@uiuc.edu). --
-- Please do not strip this note from this list when passing it on. --
ARC (.arc)
This format is most popular on PCs. Compresses and stores multiple
files in a single archive.
PC - arc 6.00, pk361
Mac - ArcMac 1.3c
Unix - arc 5.21
VM/CMS - arcutil
Amiga - Arc 0.23, PKAX
VMS - arcvms
Apple2 - dearc
Atari - arc 5.21b, pkunarc
OS/2 - arc2
BinHex (.hqx)
A Macintosh format. Converts a binary Mac file, including data and
resource forks, into an archive of only printing ASCII characters.
Note that BinHex4.0 will create and decode the ASCII hqx encoding used
on Usenet, while BinHex5.0 will decode the ASCII hqx encoding but will
create a non-ASCII binary file.
PC - xbin 2.3
Mac - BinHex4.0, BinHex5.0
Unix - mcvert
VM/CMS - binhex
binscii ( )
A favorite Apple2 archive format.
Apple2 - binscii
Compactor (.cpt)
A new Macintosh format. Compresses and stores multiple files in
a single archive.
Mac - Compactor1.21
compress (.Z)
A Unix format. Compresses a single file in an archive.
PC - u16, comprs16, comp430d
Mac - MacCompress3.2A
Unix - compress
VM/CMS - compress
Amiga - compress
VMS - lzcomp
Apple2 - compress
Atari - compress
LHarc (.lzh)
This format originated on PCs, and is now popular on Amigas. Compresses
and stores multiple files in a single archive.
PC - lh113c
Mac - MacLHarc 0.41
Unix - lharc10
Amiga - LHarc
Atari - lharc113
LHWarp (.lzw)
This is an Amiga format. Compresses and stores an entire floppy in a
single archive. Better compression than plain Warp.
Amiga - Lhwarp
LU (.lbr)
This is an old format that originated with CP/M. It is virtually
non-existent now. Collects multiple files into a single archive
with no compression.
PC - lue220
Mac - ArcMac 1.3c
Unix - lar
VM/CMS - arcutil
VMS - vmssweep
nupack ( )
A favorite Apple2 archive format.
Apple2 - nupack
PackIt (.pit)
An old Macintosh format. Compresses and stores multiple files in a
single archive.
PC - UnPackIt
Mac - PackIt3.1.3
Unix - unpit
PAK (.pak)
An old PC format. Compresses and stores multiple files in a
single archive. Also the name of an Amiga format which produces
self-extracting archives. Also the name of a new PC format.
PC - pak250
Unix - arc 5.21
Amiga - PAK 1.0
shell archive (.shar, .sh)
A Unix format. Stores multiple files in a single archive without
compression.
PC - unshar
Mac - UnShar2.0
Unix - sh, unshar
Amiga - UnShar
Apple2 - unshar
Atari - shar
Squeeze (._Q_)
An old PC (CP/M?) format. Compresses and stores multiple files in a
single archive.
PC - sqpc131
VM/CMS - arcutil
Amiga - Sq.Usq
VMS - vmsusq
Atari - ezsqueeze
StuffIt (.sit)
A Macintosh format. Compresses and stores multiple files in a
single archive.
PC - mactopc
Mac - StuffIt 1.6
Unix - unsit
Amiga - unsit
tape archive (.tar)
A Unix format. Stores multiple files in a single archive without
compression.
PC - tar, tarread, pax, pdtar
Mac - UnTar2.0
Unix - tar
Amiga - TarSplit, pax
VMS - vmstar
Atari - sttar
uuencode (.uu, .uue)
A Unix format. Converts a binary file into an archive of only
printing ASCII characters suitable for mailing.
PC - uuxref20
Mac - UMCP-Tools1.0
Unix - uuencode, uudecode
VM/CMS - arcutil
Amiga - uuencode, uudecode
VMS - uudecode2.
Apple2 - uu.en.decode
Warp (.wrp)
This is an Amiga format. Compresses and stores an entire floppy in a
single archive.
Amiga - WarpUtil
xxencode (.xx, .xxe)
A Unix format. Converts a binary file into an archive of only
printing ASCII characters suitable for mailing. Solves many of
the problems of uuencode.
PC - uuxref20
Unix - xxencode, xxdecode
VM/CMS - xxencode
ZIP (.zip)
This format is most popular on PCs. Compresses and stores multiple
files in a single archive.
PC - pkz110
Mac - UnZip1.02c
Unix - unzip4.01
Amiga - PKAZip
Atari - pkz101-2
ZOO (.zoo)
This format is popular on many systems. Compresses and stores multiple
files in a single archive.
PC - zoo201
Mac - MacBooz2.1
Unix - zoo201
VM/CMS - zoo
Amiga - amigazoo
VMS - zoo201
Atari - booz
OS/2 - booz
------------------------------
Date: Wed, 07 Aug 91 10:39:59 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Amiga Anti-viral archive sites, last changed 30 June 1991
Amiga Anti-viral archive sites, last changed 30 June 1991
beach.gal.utexas.edu
John Perry <perry@beach.gal.utexas.edu>
This site can be reached through anonymous ftp.
The Amiga anti-viral archives can be found in the
directory [ANONYMOUS.PUB.VIRUS.AMIGA].
This system is running VMS, not Unix.
The IP address is 129.109.1.207.
ms.uky.edu
Sean Casey <sean@ms.uky.edu>
Access is through anonymous ftp.
The Amiga anti-viral archives can be found in /pub/amiga/Antivirus.
The IP address is 128.163.128.6.
uk.ac.lancs.pdsoft
Steve Jenkins <pdsoft@uk.ac.lancs.pdsoft>
Service for UK only; no access from BITNET/Internet/UUCP
Terminals : call lancs.pdsoft, login as "pdsoft", pwd "pdsoft"
FTP : call lancs.pdsoft, user "pdsoft", pwd "pdsoft".
Pull the file "help/basics" for starter info, "micros/index" for index.
Anti-Viral stuff is held as part of larger micro software collection
and is not collected into a distinct area.
ux1.cso.uiuc.edu
Mark Zinzow <markz@vmd.cso.uiuc.edu>
Lionel Hummel <hummel@cs.uiuc.edu>
The archives are in /amiga/virus.
There is also a lot of stuff to be found in the Fish collection.
The IP address is 128.174.5.59.
------------------------------
Date: Wed, 07 Aug 91 10:40:30 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Apple II Anti-viral archive sites, last changed 30 June 1991
Apple II Anti-viral archive sites, last changed 30 June 1991
brownvm.bitnet
Chris Chung <chris@brownvm.bitnet>
Access is through LISTSERV, using SEND, TELL and MAIL commands.
Files are stored as
apple2-l xx-xxxxxx
where the x's are the file number.
uk.ac.lancs.pdsoft
Steve Jenkins <pdsoft@uk.ac.lancs.pdsoft>
Service for UK only; no access from BITNET/Internet/UUCP
Terminals : call lancs.pdsoft, login as "pdsoft", pwd "pdsoft"
FTP : call lancs.pdsoft, user "pdsoft", pwd "pdsoft".
Pull the file "help/basics" for starter info, "micros/index" for index.
Anti-Viral stuff is held as part of larger micro software collection
and is not collected into a distinct area.
------------------------------
Date: Wed, 07 Aug 91 10:41:01 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Atari ST Anti-viral archive sites, last changed 30 June 1991
Atari ST Anti-viral archive sites, last changed 30 June 1991
atari.archive.umich.edu
Jeff Weiner <weiner@atari.archive.umich.edu>
Service via FTP and mail, FTP preferred.
Login as "anonymous", password is your mail address.
For instructions on the mail server, send the message
help
to <atari@atari.archive.umich.edu>
"Index" contains complete listing with descriptions.
"CompInd.Z" contains same list but is compressed.
"ls-lR.Z" contains compressed ls -lR listing.
All anti-viral material is contained in ~atari/utilities/virus
The IP number for this site is 141.211.164.8, but may change.
twitterpater.Eng.Sun.COM
Steve Grimm <koreth@twitterpater.Eng.Sun.COM>
Access to the archives is through mail server.
For instructions on the archiver server, send
help
to <archive-server@twitterpater.eng.sun.com>
uk.ac.lancs.pdsoft
Steve Jenkins <pdsoft@uk.ac.lancs.pdsoft>
Service for UK only; no access from BITNET/Internet/UUCP.
Terminals : call lancs.pdsoft, login as "pdsoft", pwd "pdsoft".
FTP : call lancs.pdsoft, user "pdsoft", pwd "pdsoft".
Pull the file "help/basics" for starter info, "micros/index" for index.
Anti-Viral stuff is held as part of larger micro software collection
and is not collected into a distinct area.
------------------------------
Date: Wed, 07 Aug 91 10:41:34 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Anti-viral Documentation archive sites, last changed 10 July 1991
Anti-viral Documentation archive sites, last changed 10 July 1991
cert.sei.cmu.edu
Kenneth R. van Wyk <krvw@sei.cmu.edu>
Access is available via anonymous ftp, IP number 192.88.209.5.
This site maintains archives of all VIRUS-L digests, all
CERT advisories, as well as a number of informational documents.
VIRUS-L/comp.virus information is in:
pub/virus-l/archives
pub/virus-l/archives/predig
pub/virus-l/archives/1988
pub/virus-l/archives/1989
pub/virus-l/archives/1990
pub/virus-l/docs
CERT information is in:
pub/cert_advisories
pub/cert-tools_archive
csrc.ncsl.nist.gov
John Wack <wack@ecf.ncsl.nist.gov>
This site is available via anonymous ftp, IP number 129.6.48.87.
The archives contain all security bulletins issued thus far from
organizations such as NIST, CERT, NASA-SPAN, DDN, and LLNL-CIAC.
Also, other related security publications (from NIST and others)
and a partial archive of VIRUS_L's and RISK forums.
lehiibm1.bitnet
Ken van Wyk <LUKEN@LEHIIBM1.BITNET> new: <krvw@sei.cmu.edu>
This site has archives of VIRUS-L, and many papers of
general interest.
Access is through ftp, IP address 128.180.2.1.
The directories of interest are VIRUS-L and VIRUS-P.
uk.ac.lancs.pdsoft
Steve Jenkins <pdsoft@uk.ac.lancs.pdsoft>
Service for UK only; no access from BITNET/Internet/UUCP
Terminals : call lancs.pdsoft, login as "pdsoft", pwd "pdsoft"
FTP : call lancs.pdsoft, user "pdsoft", pwd "pdsoft".
Pull the file "help/basics" for starter info, "micros/index" for index.
Anti-Viral stuff is held as part of larger micro software collection
and is not collected into a distinct area.
unma.unm.edu
Dave Grisham <dave@unma.unm.edu>
This site has a collection of ethics documents.
Included are legislation from several states and policies
from many institutions.
Access is through ftp, IP address 129.24.8.1.
Look in the directory /ethics.
------------------------------
Date: Wed, 07 Aug 91 10:42:05 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: IBMPC Anti-viral archive sites, last changed 30 June 1991
IBMPC Anti-viral archive sites, last changed 30 June 1991
beach.gal.utexas.edu
John Perry <perry@beach.gal.utexas.edu>
This site can be reached through anonymous ftp.
The IBMPC anti-viral archives can be found in the
directory [ANONYMOUS.PUB.VIRUS.PC].
This system is running VMS, not Unix.
The IP address is 129.109.1.207.
risc.ua.edu
James Ford <JFORD@UA1VM.UA.EDU> <JFORD@mib333.mib.eng.ua.edu>
This site can be reached through anonymous ftp.
The IBM-PC anti-virals can be found in pub/ibm-antivirus.
Uploads to pub/ibm-antivirus/00uploads. Uploads are screened.
Requests to JFORD@UA1VM.BITNET for UUENCODED files will be filled
on a limited basis as time permits.
The IP address is 130.160.4.7.
uk.ac.lancs.pdsoft
Steve Jenkins <pdsoft@uk.ac.lancs.pdsoft>
Service for UK only; no access from BITNET/Internet/UUCP
Terminals : call lancs.pdsoft, login as "pdsoft", pwd "pdsoft"
FTP : call lancs.pdsoft, user "pdsoft", pwd "pdsoft".
Pull the file "help/basics" for starter info, "micros/index" for index.
Anti-Viral stuff is held as part of larger micro software collection
and is not collected into a distinct area.
ux1.cso.uiuc.edu
Mark Zinzow <markz@vmd.cso.uiuc.edu>
This site can be reached through anonymous ftp.
The IBMPC anti-viral archives are in /pc/virus.
The IP address is 128.174.5.59.
wsmr-simtel20.army.mil
Keith Peterson <w8sdz@wsmr-simtel20.army.mil>
Direct access is through anonymous ftp, IP 192.88.110.20.
The anti-viral archives are in PD1:<MSDOS.TROJAN-PRO>.
Please get the file 00-INDEX.TXT and review it offline.
NOTE:
There are also a number of servers which provide access
to the archives at simtel.
WSMR-SIMTEL20.Army.Mil can be accessed using LISTSERV commands
from BITNET via LISTSERV@NDSUVM1, LISTSERV@RPIECS and in Europe
from EARN TRICKLE servers. Send commands to TRICKLE@<host-name>
(for example: TRICKLE@AWIWUW11). The following TRICKLE servers
are presently available: AWIWUW11 (Austria), BANUFS11 (Belgium),
DKTC11 (Denmark), DB0FUB11 (Germany), IMIPOLI (Italy),
EB0UB011 (Spain) and TREARN (Turkey).
------------------------------
Date: Wed, 07 Aug 91 10:42:36 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Macintosh Anti-viral archive sites, last changed 30 June 1991
Macintosh Anti-viral archive sites, last changed 30 June 1991
beach.gal.utexas.edu
John Perry <perry@beach.gal.utexas.edu>
This site can be reached through anonymous ftp.
The Macintosh anti-viral archives can be found in the
directory [ANONYMOUS.PUB.VIRUS.MAC].
This system is running VMS, not Unix.
The IP address is 129.109.1.207.
dftnic.gsfc.nasa.gov
Brian Lev <lev@dftnic.gsfc.nasa.gov> <SDCDCL::LEV> <LEV@DFTBIT>
This site offers the "MacSecure" package, made up of John Norstad's
Disinfectant, and a pair of locally developed HyperCard stacks:
Joe McMahon's "Anti-Viral Doc" and Brian Lev's "MacHelper".
Floppy disk:
Advanced Data Flow Technology Office
Code 930.4
Goddard Space Flight Center
Greenbelt, MD 20771 (Attn: Brian Lev)
DECnet Copy from DFTNIC::CLDATA:[ANONYMOUS_FTP.FILES.MAC]
BinHex (ASCII) format as MACSECURE31.HQX
binary format as MACSECURE31.SEA
Anonymous FTP from DFTNIC.GSFC.NASA.GOV (128.183.10.3)
BinHex (ASCII) format as [.FILES.MAC]MACSECURE31.HQX
binary format as [.FILES.MAC]MACSECURE3.SIT
ifi.ethz.ch
Danny Schwendener <macman@ethz.uucp>
Interactive access through DECnet (SPAN/HEPnet):
$SET HOST 57434 or $SET HOST AEOLUS
Username: MAC
Interactive access through X.25 (022847911065) or Modem 2400 bps
(+41-1-251-6271):
# CALL B050 <cr><cr>
Username: MAC
Files may also be copied via DECnet (SPAN/HEPnet) from
57434::DISK8:[MAC.TOP.LIBRARY.VIRUS]
rascal.ics.utexas.edu
Werner Uhrig <werner@rascal.ics.utexas.edu>
Access is through anonymous ftp, IP number is 128.83.138.20.
Archives can be found in the directory mac/virus-tools.
scfvm.bitnet
Joe McMahon <xrjdm@scfvm.bitnet>
Access is via LISTSERV.
SCFVM offers an "automatic update" service. Send the message
AFD ADD VIRUSREM PACKAGE
and you will receive updates as the archive is updated.
You can also subscribe to automatic file update information with
FUI ADD VIRUSREM PACKAGE
sumex-aim.stanford.edu
Bill Lipa <info-mac-request@sumex-aim.stanford.edu>
Access is through anonymous ftp, IP number is 36.44.0.6.
Archives can be found in /info-mac/virus.
Administrative queries to <info-mac-request@sumex-aim.stanford.edu>.
Submissions to <info-mac@sumex-aim.stanford.edu>.
There are a number of sites which maintain shadow archives of
the info-mac archives at sumex:
* MACSERV@PUCC services the Bitnet community
* LISTSERV@RICE for e-mail users
* FILESERV@IRLEARN for folks in Europe
uk.ac.lancs.pdsoft
Steve Jenkins <pdsoft@uk.ac.lancs.pdsoft>
Service for UK only; no access from BITNET/Internet/UUCP
Terminals : call lancs.pdsoft, login as "pdsoft", pwd "pdsoft"
FTP : call lancs.pdsoft, user "pdsoft", pwd "pdsoft".
Pull the file "help/basics" for starter info, "micros/index" for index.
Anti-Viral stuff is held as part of larger micro software collection
and is not collected into a distinct area.
wsmr-simtel20.army.mil
Robert Thum <rthum@wsmr-simtel20.army.mil>
Access is through anonymous ftp, IP number 192.88.110.20.
Archives can be found in PD3:<MACINTOSH.VIRUS>.
Please get the file 00README.TXT and review it offline.
------------------------------
Date: Wed, 07 Aug 91 10:43:08 -1000
From: Jim Wright <jwright@cfht.hawaii.edu>
Subject: Unix Anti-viral and security archive sites, last changed 30 June 1991
Unix Anti-viral and security archive sites, last changed 30 June 1991
funic.funet.fi
Jyrki Kuoppala <jkp@cs.hut.fi>
Accessible through anonymous ftp, IP number 128.214.6.100.
Directory pub/unix/security contains programs to help in
security, pub/doc/security contains various documents about
security in general and unix security (like the worm
documents)
wuarchive.wustl.edu
Chris Myers <chris@wugate.wustl.edu>
Accessible through anonymous ftp, IP number 128.252.135.4.
A number of directories can be found in ~ftp/usenet/comp.virus/*.
------------------------------
End of VIRUS-L Digest [Volume 4 Issue 139]
******************************************