On Mon, 27 Jul 1998, Conrad Wei-Li Song wrote:

  > You miss the point... The strain has to isolated and then disassembled
  > to see exactly how the virus works.  You've simply stated symptoms.

Dissecting it can come in time.  Preventing problems BEFORE they occur 
in <5 days is a HIGHER priority.

  > Yes, sure.  Check the UT-Home page:
  > http://www.utexas.edu/cc/ds/alerts/win32cih.html
  > 
  > and see if you see any other virus scanner than Dr. Solomon's
  > mentioned.

Dr Solomon's is licensed with UT Connect.  The web page states "IF you
have subscribed to UT Connect.."  and then goes on with "If you have some
other virus-detection software, contact the provider immediately for
information."

  > If there are other scanners which can check for the virus, why were
  > the names of these scanners not made public?

Other scanners may be licensed within a particular department, but
distribution to other departments violates licensing agreements.

  > You actually answered what I was hinting at: that if the computer
  > systems are COMPLETELY restored from a network drive, there should be
  > no chance in hell of a widespread infestation.  The fact that the disk
  > image itself was infected means that protocols were breached or poorly
  > defined.

Glad to spread information rather than spread rumor.  Having a disk image
infected does not indicate a protocol problem.  If the LATEST anti-virus
package were used when buidling the image, but was UNABLE to detect the
presence of a virus, that is no fault of the individual building the
image.

However, rather than ragging on ACITS and *hinting* that the alert was
nothing more than a plot to sell more copies of UT Connect, I would  
*thank* the people who worked hard to get help out as soon as possible.


********************************************************************
  Marty Combs                       Was das ist, ist verursacht
  ACITS, (E26 2.316)                durch das was war,
  The University of Texas           und das, was sein wird,
  Austin, TX  78712                 hat das was ist zur Ursache.

  Tel: 512-232-3521                          -Reme der Gourmont
********************************************************************
              (Opinions expressed are TOTALLY mine.)

---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]

Reply via email to