Info-ParaNet Newsletters Volume I Number 407 Sunday, May 26th 1991 Today's Topics: *** Virus ** Alert *** Trojan version of VIRUSCAN version 78 (PC) Re: OOPS Re: Arthur C. Clark Bar Re: 'ufo Abductions' Show On Cbs Gerry Zeitlin Meier, Stevens, Tucson and the Moon Re: Csicop members Re: Extraordinary claims green fireballs Re: Meier, Stevens, Tucson And The Moon Re: WALTER.SAL Re: WALTER.SAL Re: NUKE 'EM! Dan Quayle on Mars ------------------------------------------------------------------------------- From: Michael.Corbin@p0.f428.n104.z1.FIDONET.ORG (Michael Corbin) Subject: *** Virus ** Alert *** Date: 17 May 91 00:28:00 GMT * Forwarded from "FidoSysop" * Originally from Steve Shapiro * Originally dated 16 May 91 13:37:02 Folks, I copied this over from the SHAREWARE ECHO. I just know that you will be interested in it. Tom Johannsen Howdy All ! I have just received notice about a possible virus/trojan program which I thought the rest of you might want to know about. Regards, Steve. /////////////////////////////////////////////////////////////////////////// TROJAN VERSION OF VIRUSCAN VERSION 78 We have received a trojan horse version of VIRUSCAN. The hacked SCAN has apparently been uploaded to BBSes in Michigan, USA under the filename SCANV78.ZIP. Running PKZIP -V on the file reveals: .PKUNZIP (R) FAST! Extract Utility Version 1.1 03-15-90 .Copr. 1989-1990 PKWARE Inc. All Rights Reserved. PKUNZIP/h for help .PKUNZIP Reg. U.S. Pat. and Tm. Off. . .Searching ZIP: SCANV78.ZIP - Fantasia BBS (313)/788-0882 . . Length Method Size Ratio Date Time CRC-32 Attr Name . ------ ------ ----- ----- ---- ---- ------ ---- ---- . 12816 Implode 5255 59% 04-08-91 14:28 08a87ed8 --w AGENTS.TXT . 9406 Stored 9406 0% 02-03-91 17:04 42cf9931 --w REGISTER.DOC . 23008 Implode 12550 46% 05-06-91 18:15 f9735dd5 --w SCAN.EXE . 6495 Implode 1895 71% 10-31-89 16:16 0449b09d --w VALIDATE.COM . 3626 Implode 1802 51% 11-29-90 01:59 ab76470f --w README.1ST . 21257 Implode 5767 73% 05-06-91 19:35 a0728a17 --w VIRLIST.TXT . 2844 Implode 1406 51% 02-14-91 14:25 aa330b57 --w VALIDATE.DOC . 24515 Implode 9188 63% 05-06-91 19:34 172a967f --w SCAN78.DOC . ------ ------ --- ------- . 103967 47269 55% 8 The number listed for the Fantasia BBS is NOT a BBS number and has no connection with the trojan horse. I have called the phone number and asked the party at the other end to contact me. Running PKUNZIP on the file reveals the following: .PKUNZIP (R) FAST! Extract Utility Version 1.1 03-15-90 .Copr. 1989-1990 PKWARE Inc. All Rights Reserved. PKUNZIP/h for help .PKUNZIP Reg. U.S. Pat. and Tm. Off. . .Searching ZIP: SCANV78.ZIP - Fantasia BBS (313)/788-0882 . Exploding: AGENTS.TXT -AV . Extracting: REGISTER.DOC -AV . Exploding: SCAN.EXE -AV . Exploding: VALIDATE.COM -AV . Exploding: README.1ST -AV . Exploding: VIRLIST.TXT -AV . Exploding: VALIDATE.DOC -AV . Exploding: SCAN78.DOC -AV . . Authentic files Verified! # TJB859 Zip Source: McAFEE ASSOCIATES While the Authentic Files Verified Message appears, the Serial Number is NOT correct. McAfee Associate's Serial Number is NWM405. Examination of the AGENTS.TXT, README.1ST, VALIDATE.*, and VIRLIST.TXT files revealed that these are straight from VIRUSCAN Version 77--the version number in the VIRLIST.TXT file was still V77. The SCAN78.DOC file had been modified so that all occurrences of V77 were switched to V78. Additionally, the following text was added for the validation data: . The validation results for Version 77 should be: . . FILE NAME: SCAN.EXE . SIZE: 23,008 . DATE: 05-06-1991 . FILE AUTHENTICATION . Check Method 1: 2C21 . Check Method 2: 022E . For the What's New section, the following text was added: . WHAT'S NEW . Version 78 of SCAN removes a few small bugs and continues . to optimize the procedures SCAN uses to find viruses, as in Version 77, . as well as adding a few more to the list of known viruses. SCAN is now much . more compressed than was previously thought possible, so please enjoy the . shortened file size, it should still work just fine. . Refer to the enclosed VIRLIST.TXT file for a schematic . description of the new viruses. For a complete description, please . refer to Patricia Hoffman's VSUM document. . Examination of the SCAN.EXE file has show that it contains the help message that VIRUSCAN displays as well as the program information message. However, the program does not contain any of the other messages that VIRUSCAN has in it. The REGISTER.DOC file distributed with the trojan version of VIRUSCAN is not a text file, but rather another .ZIP file containing a file named TB1.COM: . PKUNZIP (R) FAST! Extract Utility Version 1.1 03-15-90 . Copr. 1989-1990 PKWARE Inc. All Rights Reserved. PKUNZIP/h for help . PKUNZIP Reg. U.S. Pat. and Tm. Off. . . Searching ZIP: REGISTER.DOC . Extracting: TB1.COM -AV . . Authentic files Verified! # TJB859 Zip Source: McAFEE ASSOCIATES . When unZIPped, the REGISTER.DOC file displays the same Authentic Files Verified Message as the SCANV78.ZIP file did. Examination of the of the TB1.COM file revealed that it contains the Whale virus. This is all I currently know about the SCANV78.ZIP trojan. If you see any copies of this file, please ask the system administrator or sysop to remove it and ask them to contact the uploader to warn them that it contains a virus. Aryeh Goretsky McAfee Associates Technical Support - - - - aryehg@tacom-emh1.army.mil ++++++++++++++++++++++ The full NEWS header follows +++++++++++++++++++++++++++ News Article 1437 >Path: hollie.rdg.dec.com!pa.dec.com!decwrl!lll-winken!elroy.jpl.nasa.gov! >swrinde!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu! >vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw >From: aryehg%darkside.com@apple.com (Aryeh Goretsky) >Newsgroups: comp.virus >Subject: Trojan version of VIRUSCAN version 78 (PC) >Message-ID: <0010.9105141317.AA10748@ubu.cert.sei.cmu.edu> >Date: 13 May 91 21:50:16 GMT >Sender: Virus Discussion List >Lines: 113 >Approved: krvw@sei.cmu.edu -- Michael Corbin - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Michael.Corbin@p0.f428.n104.z1.FIDONET.ORG -------------------------------------------------------------------- From: Pete.Porro@f414.n154.z1.FIDONET.ORG (Pete Porro) Subject: Re: OOPS Date: 15 May 91 18:05:42 GMT Does the article say when this happened (the actual date of the occurance?) to the ten missing people? If you are familar with the tabloids they run stories about "Priest Bursts into flames on pulpit" just as if it happened yesterday, somewhere in books I found that this happened in the 1800's and they just run the story every few years. The report you have sure sounded current considering the ride for charity etc. I wonder if someone in France has the original and any follow-up report on the 10 young riders. Maybe they rode over a cliff, in which case it's 5 + 10 in recent months? Just wondering if there are any more specifics. Interesting story. -- Pete Porro - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Pete.Porro@f414.n154.z1.FIDONET.ORG -------------------------------------------------------------------- From: Michael.Corbin@p0.f428.n104.z1.FIDONET.ORG (Michael Corbin) Subject: Re: Arthur C. Clark Bar Date: 23 May 91 00:37:00 GMT > Me not post messages or express views? I can't help running off at the > fingers sometimes. I was commenting to Jim because if any of you still > take the time to read UFO on Fidonet, you'll see a couple of AKA posters > who are starting the Reptiles are comming trand again. If someone asks > them for evidence they get a response like, "Oh you closed minded people > will never understand why you are so stupid." Which as usual has nothing > to do with hard or even soft facts about what's going on. Last week I > saved a message from someone who says they have built a UFO but we are > not ready for the technology yet so it's secret. The week before it was > the Greys and the agreements we made, including the world wide > underground tunnel systems. To what do you attribute such postings, Pete? > There is an endless cycle of incredible storys, which do more to confuse > issues than any disinformation campaign ever could. The Govt. doesn't > have to throw a monkey wrench into things, it's being covered by others > already. As usual a gold star goes to Paranet because of open minded > skepticism. Seldome do I see people blasting away with personal flames, > and even unusual theorys are received with an inquiring interest, > questioned and evaluated from a reasonable perspective. That is the exact theme of the article that I wrote for this past issue of UFO Magazine: We don't need disinformation agents of the government, we are doing a fine job of disinforming ourselves. But, I feel that the problem with those over in Fido UFO are something else. What strikes me funny is that there seems to be a very tight clique of folks who subscribe to a certain belief system, and they are attempting to persuade others of it. If you don't fit the mold, then it's ADIOS CHARLIE! I personally know what it is that they belong to and the beliefs they subscribe to, which is akin to a pseudo-religious movement with space brothers as their saviors. This is all well and good, but the problem is that they are not capable of operating in the open because most people would shy away if they knew. This is also why > sisters and many others from (corrected) the 1800's it was parlor tricks > and fun. Sometimes it was so well done that the hoax took on realistic > acceptance. People like the amazing Randi serve a needed purpose, that > which makes us reflect upon events, or evaluate before just accepting > out of blind following. It seperates some of the frauds so time can be > invested in more efficient research instead of wasted chasing tall > tales. The "debunkers" cannot refute everything, therefore the smaller > percentage of reports or events can be examined more closely. I guess > what I am saying is, take it all in, file away the obvious erroneous > reports, shelf the questionable events, and concentrate on the most > likely to produce verifiable research materials. (note: I didn't say > throw anything away, just put it on the back burner) And don't forget > Spam is 100 years old now! There is something very interesting going on. There seems to be a lot of noise drowning the signal. It is not that there are not strange, almost metaphysical things going on, but there are too many people willing to accept it and everything else on blind faith. I believe your method is the most effective..."take it all in, file away the obvious erroneous reports, shelf the questionable events, and concentrate on the most likely to produce verifiable research materials..." The only thing I would add to your statement is that everyone should test everything first to arrive at the method you propose. Mike -- Michael Corbin - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Michael.Corbin@p0.f428.n104.z1.FIDONET.ORG -------------------------------------------------------------------- From: Michael.Corbin@p0.f428.n104.z1.FIDONET.ORG (Michael Corbin) Subject: Re: 'ufo Abductions' Show On Cbs Date: 23 May 91 00:40:00 GMT > Geez, Mike, you're the third person who's mentioned that his VCR > either died or ate the tape of that show. > I have a tape, which I've just loaned to my brother-in-law. I suppose > his VCR will proceed to eat my tape. > Anyway, if I get it back, I can make you a copy. Thanks. I had the VCR and television out the other day for a demo. I apparently didn't hook something up right when I returned it to the stand, and voilla!! Gray screen! Mike -- Michael Corbin - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Michael.Corbin@p0.f428.n104.z1.FIDONET.ORG -------------------------------------------------------------------- From: Jim.Speiser@paranet.FIDONET.ORG (Jim Speiser) Subject: Gerry Zeitlin Date: 17 May 91 17:17:00 GMT Dan: Do you know the present whereabouts of Gerald Zeitlin? I need to get in touch with him on a matter of extreme importance. If you can provide a current phone number, or ask him to call me, t'would be greatly appreciated. Thanks, Jim -- Jim Speiser - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Jim.Speiser@paranet.FIDONET.ORG -------------------------------------------------------------------- From: Clark.Matthews@f816.n107.z1.FIDONET.ORG (Clark Matthews) Subject: Meier, Stevens, Tucson and the Moon Date: 15 May 91 01:15:00 GMT To: well!ddrasin@apple.com (Dan Drasin) THANK YOU, Dan, for this: > > + In regard to Meiers Metal that was supposedly examained > by an IBM > + engineer - as I recall the 'engineer' was a lower level > technician > + with a penchant for overstatment. I also seem to recall > that after > + the piece was analyzed it conveniently was lost - the > 'engineer' was > + carrying it around in his pocket and misplaced it, or > some such > + nonsense. > > Jim, I almost hate to tell you this, but that 'lower level > technician' > you recall was none other than the late Marcel Vogel, > holder of > hundreds of high-tech patents and one of the top > crystallographers in > the country. His work was central to the development of > magnetic media > for computers (hard and floppy disks) and liquid crystal > display > devices. In recent years he devoted himself to exploring > some of the > lesser-known properties of crystals, including many that > have been > poo-poohed by 'scientists' without so much as a wisp of an > attempt at > honest research. > > I can't verify this, but the story I heard was that Vogel > made the > mistake of submitting the sample to a certain government > agency for > independent analysis, and that was the last he ever saw of > it. > However, the data tapes of the sample, made through his > scanning electron > microscope, have been preserved. In the end, neither he nor > any of his > professional colleagues who examined the actual sample > could figure > out how the Meier (not 'Meiers,' please) sample could have > been > created with any metallurgical processes known to them. > Dan, I think your comments re: the lingering questions about the Meier case are well taken. I, too, became highly dismissive of Meier, the photos, the books, and all of the related evidence in the case. But open questions remain. The sandbag job done on Vogel was one of the things that stuck in my craw. Vogel remained absolutely silent on what actually happened for the rest of his life, though. Perhaps his pension was jeopardized, or other pressure was brought to bear on him personally, professionally, or through IBM. I have no way of knowing. But he was certainly well qualified and well equipped to study the Meier metal sample, and the sample's disappearance was especially puzzling. Dr. Vogel was virtually *blamed* for the disappearance of the sample, and never spoke out about what actually happened to it. Could you tell me -- either here or privately (my BBS number is: 201-451-3063 24 hrs.) -- what the source of your info on Dr. Vogel is? Also, do you know what became of the scanning electron microscopy tapes (or copies) of the sample? And finally, do you know what the microscopy showed? Some kind of unique crystal lattice, perhaps? > + Why do you think Wendelle Stevens lost > credibility/popularity with > + the UFO community? Was it because he backed up Billy > Meier at one > + time (and Billy has only a few supporters anymore?) .... > Well, Stevens only lost credibility with certain *factions* > of the UFO > community, one of them being the faction represented here > on ParaNet. > In general, 'the nuts-and-bolts' and "abduction" ufologists > have had > little patience with contactees claiming benevolent, > interdimensional, > spiritually-oriented or otherwise complex experiences, > though the > latter have always been more tolerant of the former. > Stevens has had a > reputation for honoring the *entire* spectrum of reports, > which has > always irked those of the narrowly materialist- > reductionistpersuation. > > Others lost faith (i.e., didn't want to be associated with > him) after > he was convicted of child-molestation a few years back -- > which > occurred after he refused to lay off a certain crashed- > saucer case > after repeated warnings. > Dan, the child-molestation conviction did it for me. I know that is probably illogical -- Stevens' casework & research are completely separate from his sexual proclivities, and should stand on their own merits. And great statesmen like Garry Hart and John, Robert, and Ted Kennedy have function effectively despite numerous alleged kinks. But there it is... Can you tell us which crashed saucer case? And, if you can, what new info about it? Thanks! Best, Clark -- Clark Matthews - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Clark.Matthews@f816.n107.z1.FIDONET.ORG -------------------------------------------------------------------- From: Rick.Moen@f27.n125.z1.FIDONET.ORG (Rick Moen) Subject: Re: Csicop members Date: 15 May 91 19:08:58 GMT John - In the entirely unlikely event that you are seriously interested in CSICOP's "viewpoints" (if any), you should contact CSICOP. I don't know how I could possibly make this clearer. Good day. Regards, Rick M. -- Rick Moen - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Rick.Moen@f27.n125.z1.FIDONET.ORG -------------------------------------------------------------------- From: Rick.Moen@f27.n125.z1.FIDONET.ORG (Rick Moen) Subject: Re: Extraordinary claims Date: 15 May 91 19:18:11 GMT John -- I have repeated about four times in this forum my statement that I will consider having a substantive discussion of the philosophy of science, in the event that you are in fact interested in such a discussion, in a more {_appropriate echo or newsgroup. If you are not in fact interested in such a discussion, I must insist on dropping the topic. I will not be badgered into long, off-topic discussions on this echo, especially with someone I suspect has little interest in substantive discussion in the first place. Best Regards, Rick M. -- Rick Moen - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Rick.Moen@f27.n125.z1.FIDONET.ORG -------------------------------------------------------------------- From: Steve.Gresser@f37.n114.z1.FIDONET.ORG (Steve Gresser) Subject: green fireballs Date: 17 May 91 19:57:00 GMT You want to know about green fireballs? Lemme tell ya, I saw a sucker that I just didn't believe, at about 1:30am local time, last friday, about 100 miles west of Albequerque. This was the damndest bolide I have ever seen. It started out green, and from its speed I thought "Geez, fireworks or a flare", but then I realized that I didn't see it going up. About then (now from, say, 85 deg. above the horizon to 75 deg.) whatever it was began to tumble, and turned not only from green to white, but from small to HUGE. I thought that a plane might have been crashing (or exploding, more like!). It was throwing off red tracers as well, really huge tail on this thing. Lasted to within about 20 degrees of the horizon. I think it was about 7-10 seconds, and I'd say that it was bearing about 130 degrees magnetic (we were Eastbound at the time), on the assumption that we were headed about 90 magnetic and it was about 40 degrees right of our heading. Helluva sight, too. I didn't realize what it was until it was almost over. Cast a big shadow. Huge. Anyway, what kinds of compounds (or elements?) would have to be present to produce such a show? -- Steve Gresser - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Steve.Gresser@f37.n114.z1.FIDONET.ORG -------------------------------------------------------------------- From: Linda.Bird@paranet.FIDONET.ORG (Linda Bird) Subject: Re: Meier, Stevens, Tucson And The Moon Date: 18 May 91 05:32:00 GMT Hi Mike, Two things: Could you comment more on Betty Hill and how you said she experienced some "decline" or became "a broken" person as did Billy Meiers? I'm referring to the message to which I am replying. Could you tell me if you received my book review and were you able to forward it on to Clark Matthews? For some odd reason, I am unable to dial up his BBS directly. Thanks! Linda -- Linda Bird - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Linda.Bird@paranet.FIDONET.ORG -------------------------------------------------------------------- From: Pete.Porro@f414.n154.z1.FIDONET.ORG (Pete Porro) Subject: Re: WALTER.SAL Date: 16 May 91 17:05:23 GMT There is an example of you answering your own question, why would Ed possible do this, followed at the end of the message $200,000 income for the first book, and possibly a follow up book. No matter how much it is estimated he makes a year, another 200 grand would impress anyone. Fatal flaw in logic in your message to John Hicks about the photos and the testing of them. You say that if they are said to be fakes, then it's a cover-up and the public will believe the debunkers because they don't want to believe this exists. So the only alternative you leave is believe or it's a cover-up? What's happeneing here is discrediting the source before the findings are out, which is the same sort of problem UFO research faces from others. I say let each case and each bit of evidence speak for itself, then judge. If there is reasonable evidence that the photos are real, then lets say they are reasonably believed to be authentic. If there is a preponderance of evidence that says they are hoaxed, lets say most of the results say they are fakes. The all or none principle doesn't work here. By using this method (which many do) if one photo is proven a fraud, does that mean all the others are also. (NO! not for believers, YES! for skeptics) I tend to see a greater middle ground which allows for questions and answers on both sides. The attitude that anything which contradicts is automatically a cover-up or debunkers bias, is not reasonable investigation. Just as the attitude that some have that all UFO's can't possibly exist, therefore they just don't... neither of the above is valid. My personal opinion is that Ed's photos and book are getting far too much undeserved attention. If I am correct, you feel quite the opposite. No problem from me, in many ways I'd like to find out, through reasonable evidence, that I am wrong. I still don't know why the Hudson Valley events, or the Belgium UFO's are not getting as much press coverage? I have an answer, not as much controversy connected, not as many flaws, not as much continuing media hype comming on a regular basis from the people profiting from Gulf Breeze events. What do you think? -- Pete Porro - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Pete.Porro@f414.n154.z1.FIDONET.ORG -------------------------------------------------------------------- From: Pete.Porro@f414.n154.z1.FIDONET.ORG (Pete Porro) Subject: Re: WALTER.SAL Date: 16 May 91 17:08:13 GMT One thing you mentioned, I also keep in mind... Just because there was an ability to hoax a photo, does not mean it was a hoax. -- Pete Porro - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Pete.Porro@f414.n154.z1.FIDONET.ORG -------------------------------------------------------------------- From: Pete.Porro@f414.n154.z1.FIDONET.ORG (Pete Porro) Subject: Re: NUKE 'EM! Date: 16 May 91 17:22:25 GMT Oh I guess it would be a bit dangerous to be toting a giant microwave under a helicopter anyway. I sure would not go up without a box of "top shelf" on the seat next to me, so I could eat after I fried my fanny. 8*) So if this is a reasonable method, I wonder where the radiation is comming from, and I don't think a blimp is the answer either. Remember the people who said way in the begining it was SDS testing from space? Maybe they had something? How about errant bursts of radiation from our Sun? I don't have the time (or probably the knowledge either) to go out in my backyard and start trying CO2 exposure, assorted diluted weed killers, or various chemical methods for producing the results to match crop circles. I have a feeling that a possible explination would be to does the crop, and have something which is time released so that days, months, weeks (who knows) later, the circle will form without residual evidence or footprints. (oops that's "dose" the crops) And it's only an idea. -- Pete Porro - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Pete.Porro@f414.n154.z1.FIDONET.ORG -------------------------------------------------------------------- From: Steve.Rose@p1.f134.n109.z1.FIDONET.ORG (Steve Rose) Subject: Dan Quayle on Mars Date: 16 May 91 16:55:56 GMT In a message to All <13 May 91 11:48> jrblack@shemtaia.weeg.uiowa. wrote: nc> Consequently, while it is tempting to believe that Danny has been nc> briefed on Alternative Three, it is much more likely that he picked up nc> his information from a late-night viewing of 'Robinson Crusoe on nc> Mars'. One only has to look at Dan and listen to him give a speech, to become thoroughly convinced that life flurishes on that planet even today. -- Steve Rose - via FidoNet node 1:104/422 UUCP: !scicom!paranet!User_Name INTERNET: Steve.Rose@p1.f134.n109.z1.FIDONET.ORG ********To have your comments in the next issue, send electronic mail to******** 'infopara' at the following address: UUCP {ncar,isis,boulder}!scicom!infopara DOMAIN infopara@scicom.alphacdc.com For administrative requests (subscriptions, back issues) send to: UUCP {ncar,isis,boulder}!scicom!infopara-request DOMAIN infopara-request@scicom.alphacdc.com To obtain back issues by anonymous ftp, connect to: DOMAIN ftp.uiowa.edu (directory /archives/paranet) ******************The**End**of**Info-ParaNet**Newsletter************************