[comp.virus] Problems with NARC.EXE

3501P@NAVPGS.BITNET (Jeffrey I. Weill) (08/11/90)

   We are finding something suspicious when using a shareware program
that functions as a shell for pkarc or pkzip.  The program is called
NARC.EXE 4.0, and has an authorship by Infinity Design Concepts Inc.
1987.  Using the option for changing the drive designation calls up a
pull-down window.  At the top of the window, (which a look at a
hexdump of the executable code tells us should be blank), there is a
strange character string, in multicolor letters.  It says "Die R".
This struck us as rather odd.
   Nothing out of the ordinary has happened.  It may be that someone
has hacked the code as a practical joke.  But if anyone out there has
heard of this happening before, we would like to know about it. I'm
not trying to malign this shareware, we just want to know if perhaps
we might have been hit by a Trojan of some kind.
                                     Thanks;
                                     Jeffrey I. Weill
                                     3501p@NAVPGS

woody@chinacat.Unicom.COM (Woody Baker @ Eagle Signal) (08/15/90)

3501P@NAVPGS.BITNET (Jeffrey I. Weill) writes:

> that functions as a shell for pkarc or pkzip.  The program is called
> NARC.EXE 4.0, and has an authorship by Infinity Design Concepts Inc.
> 1987.  Using the option for changing the drive designation calls up a

I have used narc 2.4 for a long time.  The problem that you are
describing does not exist in version 2.4 Here is the address of
infinity

1052 Parkway Drive
Louisvill, Kentucky 40217
Gary Conway.

2.4 does have a bug, it generaly trashes (i.e. truncates files at)
approx 30K when extracting for some reason.

Cheers
Woody