Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!uunet!seismo!husc6!rutgers!ucla-cs!zen!ucbvax!HWALHW50.BITNET!DEGROOT
From: DEGROOT@HWALHW50.BITNET (Kees de Groot [DEGROOT@HWALHW50])
Newsgroups: comp.os.vms
Subject: Checksums of SHOW.EXE and LOGINOUT.EXE
Message-ID: <8708060348.AA04963@ucbvax.Berkeley.EDU>
Date: Wed, 5-Aug-87 12:18:00 EDT
Article-I.D.: ucbvax.8708060348.AA04963
Posted: Wed Aug  5 12:18:00 1987
Date-Received: Sat, 8-Aug-87 09:16:17 EDT
Sender: daemon@ucbvax.BERKELEY.EDU
Distribution: world
Organization: The ARPA Internet
Lines: 28


       Checksums of SHOW.EXE and LOGINOUT.EXE
       --------------------------------------

       Immediately after I received the security-important-message I
       started collecting checksums of loginout.exe and show.exe.

       The 9 systems from which I received the numbers have all the
       same checksum 647406105 for show.exe but they ALL have
       different checksums for loginout.exe!

       The 9 systems are different VAXmodels; some run VMS4.5 and some
       VMS4.4.

       It seems to me that somehow LOGINOUT.EXE contains some
       site-specific material?

       Or are all these systems 'treated' by hackers?


Tel. +31-8370-  .KeesdeGroot   (DEGROOT@HWALHW50.BITNET)  o\/o  THERE AINT NO
     (8)3557/   Wageningen Agricultural University         []   SUCH THING AS
        4030    Computer-centre, the Netherlands          .==.  A FREE LUNCH!

DISCLAIMER:     My opinions are my own alone and do not represent
                any official position of my employer.

- if you go too far to the east, you find yourself in the west ..  -