Re: VIRUS Alert for the LIST

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Jim Langston wrote:

 
> Any virus that attacks a PC can totally wipe out your AS/400,
> true.  Such as deleting the library QSYS.  But the AS/400 is not
> hosting the viruses.

I don't believe that you can delete QSYS (I've tried a number of
methods without success), but you can delete the objects in QSYS
pretty easily.  We scratched a system a few months back and before we
sent it away we used FTP to see how much damage we could do.   The
answer was LOTS!  Ultimately we were able to erase any application
library, remove all journals, logs and traces, and then nuke the files
in QSYS.  

We captured the whole process with Lotus Screen Cam and were going to
make it available on our web-site but decided against it at the last
minute (it reads like a tutorial for killing a system).  I'm still
interested in a how we might be able to make this information
available to the legitimate AS/400 community without making it freely
avialable to the whole world, so drop me a note if you have any ideas.

jte



--
John Earl                                          
johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---