[comp.virus] PKZ120.EXE trojan?

PIM@HROEUR51.BITNET (05/22/91)

L.S.,

Rumors are going around here that versions of PKZ120.EXE (the
self-extracting archive containing PKZIP & PKUNZIP version 1.20 with
their accompanying other files) exist that contain a trojan or some
virus. I have no more information.  Can anybody give comments? Some
time ago I downloaded a copy from TRICKLE (European shadow of SIMTEL20
more or less) and never observed any strange behavior, nor did
virus-scanning reveal any problems.

[Ed. As with the case of *all* unfounded rumors, I would like to urge
everyone to NOT jump to any conclusions unless/until we have an
accurate statement from someone of authority on this matter.]

Sincerely,

Pim Clotscher
Erasmus University Rotterdam
Computer Support Group

padgett%tccslr.dnet@mmc.com (Padgett Peterson) (05/23/91)

>From:    <PIM@HROEUR51.BITNET>

There was a "hacked" PKZ120 a few months ago. The one I recollect was just
PKZ110 with the names & authentication codes changed. I would be surprised
if a real version 120 exists (expect Mr. Katz will skip that number)

w8sdz@WSMR-SIMTEL20.ARMY.MIL (Keith Petersen) (05/23/91)

SIMTEL20 does not now, and never has offered PKZ120.EXE.  That file is
bogus and PKWare has offered a reward for information leading to the
person or persons responsible for its creation.

This is very old information.  There has been a warning in circulation
about this for almost a year.  It was posted to the net.

The latest version of the program is:

Directory PD1:<MSDOS.ZIP>
 Filename   Type Length   Date    Description
==============================================
PKZ110EU.EXE  B  140116  900402  Katz's ZIP archive package v1.10, export vers.

This file was obtained directly from PKWare on diskette.

Keith
- - -
Keith Petersen
Maintainer of the MSDOS, MISC and CP/M archives at SIMTEL20 [192.88.110.20]
Internet: w8sdz@WSMR-SIMTEL20.Army.Mil    or     w8sdz@vela.acs.oakland.edu
Uucp: uunet!wsmr-simtel20.army.mil!w8sdz              BITNET: w8sdz@OAKLAND