home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: hsv.general
- Subject: Re: Uploaded Viruses
- Path: sparky!uunet!spool.mu.edu!sol.ctr.columbia.edu!lambda.msfc.nasa.gov!infonode!ingr!sci34hub!cdthq!gary
- From: gary@cdthq.UUCP (Gary Heston)
- Message-ID: <oRqkwB3w161w@cdthq.UUCP>
- References: <1992Dec29.214644.22097@infonode.ingr.com>
- Date: Tue, 29 Dec 92 20:43:47 CST
- Organization: Garys' Home for Obsolete Computers
- Lines: 53
-
- fordke@infonode.ingr.com (Keith Ford) writes:
-
- > In article <6692.2B407C15@umagic.FIDONET.ORG> Leah.Wesolowski@p0.f2.n373.z1.F
- >
- > >I always thought you great Sys-ops always checkd uploaded programs
- > >for the deadly programs before you made them available. I would like
-
- Never make assumptions about what someone else "should have done"
- to protect your system. Ever. *You're* the one at risk, and only
- you are aware of your systems' configuration--something that might
- destroy yours may not show up on a sysops. Also, it's generally
- not possible to scan software targeted at a different system (i.e.,
- a DOS scanner won't detect Amiga viruses, etc.).
-
- > It is suggested, but not required. My bbs has areas for tested and
- > untested uploads. When you download an untested file, you should
- > ALWAYS scan it for viruses and take precautions. However, most
- > computer viruses are not spread via bulletin boards, but via shrink
- > wrapped commercial software.
-
- Actually, it's by casual disc swapping (aka piracy). The commercial
- providers are getting a *lot* more careful nowadays. Note that this
- doesn't stop me from scanning new stuff at work; only takes a minute,
- and if it prevents an infection, it's well worth it.
-
- Also, another reason the end user should scan is that they may be
- using a more recent scanner than a sysop used when the package
- arrived. It's possible for a file to get infected with a new virus,
- pass a check with the current scanner, and get propagated further
- after a new scanner comes out. Always use the most current one
- available, and scan everything that comes in. Scan periodically
- (at least weekly) just to be safe.
-
- > Practice safe computing!
-
- Absolutly. The first thing I do each morning at work is to start
- a virus scan of seven file servers, even if I haven't installed
- anything new. *Every* file gets checked. As soon as a newer version
- of the scanner comes out, I pull it down and start using it.
-
- Of course, I'm protecting a manufacturing line building thousands
- of computers each month, and the effort is trivial for the protection
- we gain. I can't discuss or confirm any actual virus incidents, due
- to a departmental policy (yes, I objected strongly; I lost); however,
- I can say that we've found all kinds of interesting stuff on returned
- systems, including a earlier version of DOS than the system was
- shipped with. (We pre-install the software, there are no floppies
- shipped with the computers.) Needless to say, the end customer
- claimed it showed up that way; however, there's no copies of DOS 4.01
- on any of those servers.... :-)
-
- Gary Heston, at home....
- gary@cdthq.uucp
-