🚀 go-pugleaf

The CHRISTMA exec did NOT destroy itself after sending copies.  I
erased several from our users minidisks.  Also, I did not have to
shutdown our system.  I just listed all the reader files in the system
and purged any CHRISTMA exec I found.  But, there weren't many - I
forget exactly how many there were but it was less than a hundred.
Other sites merely drained their RSCS links (software that delivers
mail and files to other computers) while they cleaned up.  There may
have been some sites that found it necessary to shutdown but I have
not heard of any.  What really stopped the explosion of files was the
BITNET sites that installed a trap in RSCS to erase any CHRISTMA file
sent to it.  When installed in a few strategic nodes, this trap is
very effective at stopping this type of trojan horse.  Two more
attempts at distributing CHRISTMA were stopped as well as a couple of
others whose names I forget.  The defense is good enough that most
people aren't aware of the subsequent attacks.  I haven't seen any
attempts to distribute such trojans in a couple years.

Bridget Rutty                                        SYSBXR@SUVM.BITNET