Article View: comp.sys.ibm.pc.misc
Article #11580Re: PKZIP 2.04c Uploaded to wuarchive
From: Ron Dippold
Date: Tue, 05 Jan 1993 18:38
Date: Tue, 05 Jan 1993 18:38
29 lines
2038 bytes
2038 bytes
pkz204c.exe has been reuploaded for those who want it. Here's what I have from Scott Barlett: I downloaded the file PKZ204C.EXE from wuarchive this morning (1/5/93). I rountinely run VSHIELD v99 on my machine and no virus were detected. However, a fellow worker tried the programs on a machine that has Norton Anti-Virus (part of the Norton Desktop for Windows 2.0 release) running and it reported that the PKUNZIP, PKZIPFIX, and ZIP2EXE files were infected with a strain of the 'Maltese Ambebo' virus. I then ran SCAN v99 on the PK files with no virus reported. Likewise FluProtect (FP_206A.ZIP), ThunderByte (TBAV205.ZIP/VSIG9214.ZIP), and VirX (VIRX26.ZIP) reported no virus present, but one did flag the files as having non-standard exe-headers that could be either a program bug or a virus. The PKZIP files are compressed with PKLITE 1.20 (which is more recent than the PKLTE115.ZIP generally available) and this new exe compression could be causing the false-positive reading. I will look for other possible answers, but would appreciate if you could pass along anything you might see or hear (I do monitor comp.compression and comp.archives.msdos.announce). Thanks for posting the original file though. P.S. All indications are that it is a false-positive alarm. But I thought you might be curious/interested in the possiblity of a Virus. -- I never knew what real happiness was until I got married. And by then it was too late.
Technical Details
Message-ID:
<rdippold.726259086@cancun>Path:
arc1-ca.pugleaf.net!sparky!uunet!wupost!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!spool.mu.edu!agate!dog.ee.lbl.gov!network.ucsd.edu!qualcom.qualcomm.com!cancun!rdippoldReferences:
<rdippold.726230390@cancun> <1993Jan5.173246.4926@netcom.com>Show Full Headers
Complete Article Headers
Newsgroups: comp.sys.ibm.pc.misc Path: arc1-ca.pugleaf.net!sparky!uunet!wupost!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!spool.mu.edu!agate!dog.ee.lbl.gov!network.ucsd.edu!qualcom.qualcomm.com!cancun!rdippold From: rdippold@cancun.qualcomm.com (Ron Dippold) Subject: Re: PKZIP 2.04c Uploaded to wuarchive Message-ID: <rdippold.726259086@cancun> Sender: news@qualcomm.com Nntp-Posting-Host: cancun.qualcomm.com Organization: Qualcomm, Inc., San Diego, CA References: <rdippold.726230390@cancun> <1993Jan5.173246.4926@netcom.com> Date: Tue, 5 Jan 1993 18:38:06 GMT Lines: 29