Bugtraq mailing list archives

Re: Possible virus from Rome labs


From: scs () lokkur dexter mi us (Steve Simmons)
Date: Wed, 30 Mar 1994 20:26:32 -0500 (EST)


If you're running 'fast find' or 'locate' (you can it with gnu find
from prep.ai.mit.edu) you can determine in close to zero time if 'foosh'
or 'jnk.tmp' are on your system.  They're not on any system I've got
access to.

I just got a call from Liz Keane at Rome Labs.  Apparently they
have had a virus up there at Rome.  It may be passed through
ftp and we have ftp'd them some files lately.
She said the virus puts two files in some random place on your system.
The files are:

jnk.tmp
foosh



Current thread: