🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.ibm.pc.misc
Article #11580

Re: PKZIP 2.04c Uploaded to wuarchive

#11580
From: Ron Dippold
Date: Tue, 05 Jan 1993 18:38
29 lines
2038 bytes
pkz204c.exe has been reuploaded for those who want it.

Here's what I have from Scott Barlett:

I downloaded the file PKZ204C.EXE from wuarchive this morning
(1/5/93).  I rountinely run VSHIELD v99 on my machine and no virus
were detected.  However, a fellow worker tried the programs on a
machine that has Norton Anti-Virus (part of the Norton Desktop for
Windows 2.0 release) running and it reported that the PKUNZIP,
PKZIPFIX, and ZIP2EXE files were infected with a strain of the
'Maltese Ambebo' virus. I then ran SCAN v99 on the PK files with no
virus reported. Likewise FluProtect (FP_206A.ZIP), ThunderByte
(TBAV205.ZIP/VSIG9214.ZIP), and VirX (VIRX26.ZIP) reported no virus
present, but one did flag the files as having non-standard exe-headers
that could be either a program bug or a virus. The PKZIP files are
compressed with PKLITE 1.20 (which is more recent than the
PKLTE115.ZIP generally available) and this new exe compression could
be causing the false-positive reading. I will look for other possible
answers, but would appreciate if you could pass along anything you
might see or hear (I do monitor comp.compression and
comp.archives.msdos.announce). Thanks for posting the original file
though.
 
P.S. All indications are that it is a false-positive alarm. But I
thought you might be curious/interested in the possiblity of a Virus.

-- 
I never knew what real happiness was until I got married.  And by then it was
too late.
Technical Details
Message-ID: <rdippold.726259086@cancun>
Path: arc1-ca.pugleaf.net!sparky!uunet!wupost!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!spool.mu.edu!agate!dog.ee.lbl.gov!network.ucsd.edu!qualcom.qualcomm.com!cancun!rdippold
References: <rdippold.726230390@cancun> <1993Jan5.173246.4926@netcom.com>

Show Full Headers
Complete Article Headers
Newsgroups: comp.sys.ibm.pc.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!wupost!cs.utexas.edu!qt.cs.utexas.edu!yale.edu!spool.mu.edu!agate!dog.ee.lbl.gov!network.ucsd.edu!qualcom.qualcomm.com!cancun!rdippold
From: rdippold@cancun.qualcomm.com (Ron Dippold)
Subject: Re: PKZIP 2.04c Uploaded to wuarchive
Message-ID: <rdippold.726259086@cancun>
Sender: news@qualcomm.com
Nntp-Posting-Host: cancun.qualcomm.com
Organization: Qualcomm, Inc., San Diego, CA
References: <rdippold.726230390@cancun> <1993Jan5.173246.4926@netcom.com>
Date: Tue, 5 Jan 1993 18:38:06 GMT
Lines: 29