[comp.protocols.tcp-ip] Virus Questions

stubblef@ALMSA-1.ARPA (Glenda Stubblefield) (11/10/88)

All --

We were infected by last week's virus on our VAX 750 running
4.3.  We also have a VAX 780 running 4.3 and several Sperrys
running Unisys Sys V.  The virus seemed to be confined to our
VAX 750 but we are concerned about any possible migration to any
of our other systems.  Basically, what we saw on the 750 was a
tremendous slow down of our system with all kinds of rsh and
compile processes running, using up resources.  We also had quite
a lot of files in /usr/tmp. 

I received a call yesterday from someone who said that he had heard
on the national news that 5.2 had also been infected by this virus.
Does anyone out there know anything about this?  Is there something
we can look for, other than the symptoms that hit our 750?  We
received all the messages about the patch to sendmail and to
fingerd, but haven't heard much after that.  Is anything else going
on that would help us assure ourselves that we have done everything
we should to protect our systems?  We have some questions that are
being thrown around like; "Is there something hiding out there that
is going to jump up and bite us later".

All of our machines are connected through a LAN, and we have
ethernet on all machines.

I would sure appreciate any help/suggestions anyone can offer. 

Thanks,

Glenda Stubblefield
CSDA
St. Louis, MO