Path: utzoo!utgpu!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!mailrus!nrl-cmf!ames!pasteur!helios.ee.lbl.gov!ux1.lbl.gov!stoll
From: stoll@ux1.lbl.gov (Cliff Stoll)
Newsgroups: comp.protocols.tcp-ip
Subject: Virus Stories, Please
Summary: please send me your virus stories
Keywords: virus
Message-ID: <1278@helios.ee.lbl.gov>
Date: 18 Nov 88 13:56:28 GMT
References: <8811071522.AA15390@csc-lons.arpa> <881@umbio.MIAMI.EDU>
Sender: usenet@helios.ee.lbl.gov
Reply-To: cliff@cfa200.harvard.edu (Cliff Stoll)
Organization: Harvard-Smithsonian Cambridge, MA
Lines: 45


 COLLECTING ARPANET VIRUS STORIES

 (Apologies that I'm repostin this note:
   I am about to analyze the many comments I've received 
   and wanted to get any latecomers.
   Thanks to all who have responded so far!)

I'm collecting information about the Nov 3 Arpanet virus,
trying to determine:
     > How many sites were infected
     > How many were not
     > How quickly it spread

SO:  If you were infected, please send me a note describing
your experiences.  Please include:
     > Where are you?  What type of computers?
     > What times were stamped on the /usr/tmp/x files?
     > Which of your computers were infected?  All of them?

Please send your anecdotes & stories, such as:  
     >  What time did you discover it?
     >  What tipped you off?
     >  How did you and your colleagues respond?
     >  What would you differently?
     >  Did you call anyone?  Or did anyone call you?
     >  Where would you turn for information next time?
     >  When did you finally eradicate it?  
     >  Any weird wrinkles or strange effects?

I'm interested in hearing from you even if you were not infected!

Please pass this message on to others:
I would rather have multiple responses from a site than none.

Thank you very much for your time & trouble.
In return, I'll mail summaries to everyone that contributes.
If you'd like a copy, please include your address.


Thank you very much for your time & troubles!

Cliff Stoll                Harvard/Smithsonian Center for Astrophysics
617/495-7147               60 Garden Street,  Cambridge, MA 02138
Cliff@cfa200.harvard.edu   ( or on bitnet,  Cliff@lbl ) [Nov 5, '88] [&Nov 16]