[comp.protocols.tcp-ip] Virus Stories, Please

stoll@ux1.lbl.gov (Cliff Stoll) (11/18/88)

 COLLECTING ARPANET VIRUS STORIES

 (Apologies that I'm repostin this note:
   I am about to analyze the many comments I've received 
   and wanted to get any latecomers.
   Thanks to all who have responded so far!)

I'm collecting information about the Nov 3 Arpanet virus,
trying to determine:
     > How many sites were infected
     > How many were not
     > How quickly it spread

SO:  If you were infected, please send me a note describing
your experiences.  Please include:
     > Where are you?  What type of computers?
     > What times were stamped on the /usr/tmp/x files?
     > Which of your computers were infected?  All of them?

Please send your anecdotes & stories, such as:  
     >  What time did you discover it?
     >  What tipped you off?
     >  How did you and your colleagues respond?
     >  What would you differently?
     >  Did you call anyone?  Or did anyone call you?
     >  Where would you turn for information next time?
     >  When did you finally eradicate it?  
     >  Any weird wrinkles or strange effects?

I'm interested in hearing from you even if you were not infected!

Please pass this message on to others:
I would rather have multiple responses from a site than none.

Thank you very much for your time & trouble.
In return, I'll mail summaries to everyone that contributes.
If you'd like a copy, please include your address.


Thank you very much for your time & troubles!

Cliff Stoll                Harvard/Smithsonian Center for Astrophysics
617/495-7147               60 Garden Street,  Cambridge, MA 02138
Cliff@cfa200.harvard.edu   ( or on bitnet,  Cliff@lbl ) [Nov 5, '88] [&Nov 16]