Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!wuarchive!usc!elroy.jpl.nasa.gov!ncar!midway!msuinfo!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: FEDERMAN@CVAX.IPFW.INDIANA.EDU (ALAN N. FEDERMAN)
Newsgroups: comp.virus
Subject: re: OHIO virus found at UTMB (PC)
Message-ID: <0005.9010171920.AA12825@ubu.cert.sei.cmu.edu>
Date: 16 Oct 90 12:49:22 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 54
Approved: krvw@sei.cmu.edu

In response to:

(Reply-To:     VIRUS-L@IBM1.CC.LEHIGH.EDU
From:         "The Moderator Kenneth R. van Wyk" <krvw@CERT.SEI.CMU.EDU>
Subject:      VIRUS-L Digest V3 #170
 VIRUS-L Digest   Monday, 15 Oct 1990    Volume 3 : Issue 170)

>Date:    11 Oct 90 16:52:24 +0000
>From:    perry@beach.gal.utexas.edu (John Perry KG5RG)
>Subject: OHIO virus found at UTMB (PC)
>
>	Just a quick note to let everyone know that several IBM and
>compatible PC's here at the University of Texas Medical Branch in
>Galveston, Texas have been infected with the OHIO virus. I have not yet
>attempted to remove the virus and I would like any suggestions on the
>best way to go about it. I have the McAfee products. I will try them
>first. Anybody have any thoughts or suggestions?
>
>                              John Perry KG5RG
>                              University of Texas Medical Branch
>                              Galveston, Texas  77550-2772

Reply:

I have run a PC lab "virus free" for the last three years. We use a
Novel network, with student PCs equiped with auto-bootup ROMS on the
network cards. The students cannot write to the server hard disk, only
access applications and data. The student PCs do not have hard disks.
No floppies are handed out by staff. Students can download shareware
and licensed software.  They cannot make a DOS diskette. We also run
the McAlfee program (WE ARE LICENSED FOR IT!) A student can check a
floppy for possible infection.

We recently won a NACUBO cost reduction incentive award for this Lab.
We have stayed virus free. Other labs in this school have been
clobered repeatedly. I don't know how you could enforce a perimeter
defense.  Do you intend to screen every floppy comming in the door?
Pretty labor intensive, as well as annoying to customers. Run memory
resident virus checking programs? Those TSRs may interfer with other
applications.

 =============================================================================
[                                                                             ]
[          Alan Federman                                                      ]
[                                                                             ]
[ Coordinator of Academic Computing                                           ]
[ Indiana University - Purdue University at Fort Wayne                        ]
[ bitnet:    FEDERMAN@IPFWCVAX                                                ]
[ internet:  FEDERMAN@CVAX.IPFW.INDIANA.EDU                                   ]
[                                                                             ]
[ "It's supposed to be automatic, but you really have to press this Button."  ]
[               - John Bruner                                                 ]
[                                                                             ]
 ==============================================================================