jim%blaise@rand.UUCP ("Jim Gillogly") (01/30/90)
Geof Cooper said: > One thing that makes me wonder: A newspaper article claims that Morris > wanted to stop the worm when it started to get out of control, and > decided that he wasn't able to. When the Internet group started to > try and control it, why didn't he offer to help? The following message was sent the morning after the network worm started. My understanding is that it was sent by a friend of Morris. Checking the "Received" times suggests that it it didn't arrive in time to do any good. Jim Gillogly --------- Forwarded message ------------- Received: from SRI-NIC.ARPA by rand.org; Sat, 5 Nov 88 03:20:10 PST Received: from RELAY.CS.NET by SRI-NIC.ARPA with TCP; Fri, 4 Nov 88 23:23:24 PS T Received: from cs.brown.edu by RELAY.CS.NET id aa05627; 3 Nov 88 3:47 EST Received: from iris.brown.edu (iris.ARPA) by cs.brown.edu (1.2/1.00) id AA12595; Thu, 3 Nov 88 03:47:19 est Received: from (128.103.1.92) with SMTP via tcp/ip by iris.brown.edu on Thu, 3 Nov 88 03:34:46 EST Message-Id: <8811030834.AA10454@iris.brown.edu> Date: Thu, 3 Nov 88 03:34:13 EST From: foo%bar.arpa@RELAY.CS.NET To: tcp-ip@SRI-NIC.ARPA A Possible virus report: There may be a virus loose on the internet. Here is the gist of a message Igot: I'm sorry. Here are some steps to prevent further transmission: 1) don't run fingerd, or fix it to not overrun its stack when reading arguments. 2) recompile sendmail w/o DEBUG defined 3) don't run rexecd Hope this helps, but more, I hope it is a hoax. qui