OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1994: Re: Possible virus from Rome labs

Re: Possible virus from Rome labs

Gene Spafford (spafcs.purdue.edu)
Wed, 30 Mar 94 22:56:30 -0500

I don't suppose any of the effected systems was covered by Tripwire?
If there was a real virus (or other trojan type activity), Tripwire
would expose what files were altered....

If any of the systems are Suns, it would help to run the md5check
software from the CIAC & CERT, assuming the systems weren't running
Tripwire (or ATP or Fortress etc.).

--spaf