Back to the main page

Mailing List Logs for ShadowRN

Message no. 1
From: Tim Kerby <drekhead@***.NET>
Subject: Crash virus alpha 0.01
Date: Wed, 23 Dec 1998 09:43:44 -0500
The first signs of the crash? You decide.

http://cnnfn.com/digitaljam/9812/21/virus_pkg/

--

=================================================================
- Tim Kerby - |"Letter writing is the only
- drekhead@***.net - | device for combining
HTML to: drekhead@********.net | solitude and good company."
ICQ - UIN 2883757 | -Lord Byron
Message no. 2
From: kookaine <kookaine@*****.COM>
Subject: Re: Crash virus alpha 0.01
Date: Wed, 23 Dec 1998 16:20:58 +0100
first[OT]: hohoho, merry xmas and a happy new year to y'all.

second : i heard that one before, but it wasn't MCI. IBM got struck hard of almost the
same type of virus. the ibm virus 'unmounted' the harddrives of the servers, making all
terminals useless and leaving a 'fairly' easy encryption method (i think it was 1 or 2
bit, or something).

anyway, these dudes who made this one are deckers hotter than lava.

-my 2 cents-

kookaine

Tim Kerby wrote:

> The first signs of the crash? You decide.
>
> http://cnnfn.com/digitaljam/9812/21/virus_pkg/

--
in the real world there is violence and cruelty,
how could the world of the bit and the baud do any harm ?

-kookaine
Message no. 3
From: "Ojaste,James [NCR]" <James.Ojaste@**.GC.CA>
Subject: Re: Crash virus alpha 0.01
Date: Wed, 23 Dec 1998 12:54:54 -0500
kookaine wrote:
> second : i heard that one before, but it wasn't MCI. IBM got struck hard
> of almost the
> same type of virus. the ibm virus 'unmounted' the harddrives of the
> servers, making all
> terminals useless and leaving a 'fairly' easy encryption method (i think
> it was 1 or 2
> bit, or something).
>
Well, I wouldn't call that encryption...

> anyway, these dudes who made this one are deckers hotter than lava.
>
Huh? How so? Something like an OS or a full app is many times harder
than this. NT is full of holes, and once you have access to the Admin
account you can do whatever you like. Encrypting files is trivial,
masquerading as other programs is easy. I don't know if it can crack
NT's admin (it wouldn't have to if, say, an admin ran the program in
the first place - it would inherit his permissions), but if it can,
*that* would be the hardest part (well, figuring out *how* would be
hard, actually doing it would be easier).

Undeniably, whoever wrote it was a good programmer (it's hard to test
a virus...), but I wouldn't say "hotter than lava".

The Crash itself did much more damage - it didn't encrypt files, it
destroyed them. All of them. It must have had a reasonable incubation
period (ie time between infection and when it starts damaging things)
or else it would have been contained. More to the point, it was
cross-platform. :-)

James Ojaste
Message no. 4
From: Stefan <casanova@***.PASSAGEN.SE>
Subject: Re: Crash virus alpha 0.01
Date: Wed, 23 Dec 1998 22:40:57 +0000
>
> anyway, these dudes who made this one are deckers hotter than lava.

Hotter than Lava ? Don't think so. If he or she or them or whatever
was that hot it would have been much worse. Cross platform and stuff
like that now it is Winblows only (or as far as we know yet anyway)

And when you make a virus that is 120 kb then it can't exactly be
LAVA hot. It is freakin' hugh. When I get a 120 kb file on my system
I notice that. What did they write it in ? Visual Basic ?

Reports said C ... Damn it must do more than what it is said to do
then if it is that hugh.

> > The first signs of the crash? You decide.

Nah ... First not even the first sign of it ... It is just another
day in Winblows land ... If it doesn't affect UN*X the Net will keep
on going.

It is just another nuicense that people will put up with cause they
don't know that there are better OS:es.

So now I have nagged about why Windows sucks so badly again. :)

/Stefan


------------------------------------------------------------------------
"Frag you and the datastream you came on!" - Sinjin the decker
------------------------------------------------------------------------
... E-Mail .............................. casanova@***.passagen.se ...
... HomePage .............................. http://hsl.home.ml.org ...
... HomePage ................... http://www.bugsoft.hik.se/sl11ls/ ...
... ICQ ....................................[UIN changed!]. 793828 ...
------------------------------------------------------------------------
Message no. 5
From: Dvixen <dvixen@********.COM>
Subject: Re: Crash virus alpha 0.01
Date: Thu, 24 Dec 1998 15:46:41 -0800
At 09:43 AM 12/23/98 -0500, you wrote:
>The first signs of the crash? You decide.
>
>http://cnnfn.com/digitaljam/9812/21/virus_pkg/

Paolo's not very convinced, and I don't think I am either.

Try this for a start. :)

http://www.news.com/News/Item/0,4,30291,00.html

--
Dvixen - dvixen@********.com - dvixen@****.com
Herkimer's Lair - http://shadowrun.html.com/hlair
"What's your sign?" - "Trespassers will be shot."
Comments/Questions accepted, flames dropped into the abyss.
Message no. 6
From: Dvixen <dvixen@********.COM>
Subject: Re: Crash virus alpha 0.01
Date: Thu, 24 Dec 1998 15:53:14 -0800
>>The first signs of the crash? You decide.
>>
>>http://cnnfn.com/digitaljam/9812/21/virus_pkg/
>
>Paolo's not very convinced, and I don't think I am either.

Heh. Too much info that Paolo can decipher...

>Try this for a start. :)
> >http://www.news.com/News/Item/0,4,30291,00.html

And this: http://microsoft.com/security/bulletins/remote.asp

--
Dvixen - dvixen@********.com - dvixen@****.com
Herkimer's Lair - http://shadowrun.html.com/hlair
"What's your sign?" - "Trespassers will be shot."
Comments/Questions accepted, flames dropped into the abyss.
Message no. 7
From: "Davidson, Chris" <Christopher.Davidson@***.BOEING.COM>
Subject: Re: Crash virus alpha 0.01
Date: Mon, 4 Jan 1999 14:11:17 -0800
> or else it would have been contained. More to the point, it was
> cross-platform. :-)
>
Ew....now that makes it a bit more tasty...I don't remember reading that in the
article, but that actually makes it impressive....I thought it read that it only
works on NT...

-Toffer

Further Reading

If you enjoyed reading about Crash virus alpha 0.01, you may also be interested in:

Disclaimer

These messages were posted a long time ago on a mailing list far, far away. The copyright to their contents probably lies with the original authors of the individual messages, but since they were published in an electronic forum that anyone could subscribe to, and the logs were available to subscribers and most likely non-subscribers as well, it's felt that re-publishing them here is a kind of public service.

Thwap!