Article View: comp.os.msdos.apps
Article #3154Re: *** WARNING *** PKZIP 2.04c is infected by a virus.
From: Dwayne Barstad
Date: Thu, 07 Jan 1993 17:27
Date: Thu, 07 Jan 1993 17:27
50 lines
2908 bytes
2908 bytes
In article <1igdr6INNmth@fido.asd.sgi.com> pj@sgi.com writes: >In article <01068008.n1jdvg@mfc.ycrdi.com>, timk@ycrdi.com (Tim King) writes: >|> >|> In article <3546@accucx.cc.ruu.nl> (comp.compression), nevries@accucx.cc.ruu.nl (Nico E de Vries) writes: >|> > >|> > According to warning messages on wuarchive.wustl.edu the PKZIP 2.04c >|> > is a virus infected version. The virus detected is the "Maltese Amoeba" >|> >|> My recommendation to all is that you get your PKZIP directly from PKWARE! > >According to a discussion on the PKZIP forum of CompuServe >yesterday, this might be a false positive from Norton's AntiVirus >utility. > >One person said that he saw this particular virus reported in >PKZ204C, using an older version of the Norton AV utility, but >that a more recent AV didn't report that virus. Another person >reported that on another forum complaints were numerous that some >other particular piece of software (I've forgotten what) was >triggering the "Maltese Amoeba" from Norton AV, apparently >falsely. > >I downloaded the PKZ204C.EXE (self extracting) file from >CompuServe, and examined it with f_prot (version 206a) and found >no problem. It was from Library 16 of FIFTHGEN (or FGS?), as I >recall. > >I worry more about electric spikes, disk crashes, software bugs >and stupid operator errors (I'm the operator) destroying my data >than I do viruses. Since I back up religiously to cover for >these more common data destroyers, I figure I'll survive a virus >if I ever see one. > I just downloaded the pkz204c.exe directly from PKWare Inc. in Wisconsin. Thier Billboard says that the detection of said virus is du to a bad virus string data file, and has a replacement for the older (defective) file on its BBS. The Pkz204c.exe extracts with av... and works great. Here goes the multi- volume backup... ZIP LIKE HELL!!!!!!! Dwayne -- ============================================================================= == Dwayne Barstad barstad@plains.nodak.edu (Internet) == == Computer Engineering (Student) barstad@plains (BITNET) == == North Dakota State University Phone: (701) 237-5131 == =============================================================================
Technical Details
Message-ID:
<C0Hv5y.FBo@ns1.nodak.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!haven.umd.edu!ames!saimiri.primate.wisc.edu!usenet.coe.montana.edu!news.u.washington.edu!ns1.nodak.edu!plains.NoDak.edu!barstadReferences:
<01068008.n1jdvg@mfc.ycrdi.com> <1igdr6INNmth@fido.asd.sgi.com>Show Full Headers
Complete Article Headers
Newsgroups: comp.os.msdos.apps Path: arc1-ca.pugleaf.net!sparky!uunet!haven.umd.edu!ames!saimiri.primate.wisc.edu!usenet.coe.montana.edu!news.u.washington.edu!ns1.nodak.edu!plains.NoDak.edu!barstad From: barstad@plains.NoDak.edu (Dwayne Barstad) Subject: Re: *** WARNING *** PKZIP 2.04c is infected by a virus. Sender: usenet@ns1.nodak.edu (News login) Message-ID: <C0Hv5y.FBo@ns1.nodak.edu> Date: Thu, 7 Jan 1993 17:27:34 GMT References: <01068008.n1jdvg@mfc.ycrdi.com> <1igdr6INNmth@fido.asd.sgi.com> Nntp-Posting-Host: plains.nodak.edu Organization: North Dakota Higher Education Computing Network Lines: 50