VALDIS@vtvm1.cc.vt.edu (Valdis Kletnieks) (04/26/91)
Sorry for the cross-posting, but...
There is a worm loose on bitnet. I've gotten hit by 3 copies so far,
all coming out of PSUVM. I have not determined the origin node yet.
The important characteristics:
Name: ZT EXEC
Language: Rexx
Size: 68 lines.
It sends a copy of itself to everybody in your NAMES file, using
rather poor parsing, and the PUNCH command rather than SENDFILE. The
inducement to run it is that it claims to be a 'zebra tell', sending
multi-color messages (actually does 3270 extended attribute chars for
bright/normal).
I suggest that the core nodes put it in their filters.
Valdis Kletnieks
Computer Systems Engineer
Virginia Polytechnic Institute