[comp.os.msdos.apps] PKZIP virus?

haviland@emily.uvm.edu (tom haviland) (07/27/90)

Does anyone out there know the current status of PKZIP?  I have version
1.02, and I have seen a couple pkzip 1.10 versions on some bulletin
boards, but I seem to recall that some version of pkzip had a virus
in it.  Does anyone out there have the scoop on this?

Also, what are some of the good virus detection programs?  

I'm starting to become a bbs junkie, so I figure I'd better protect
myself...

                                  tom



	 					Thomas P. Haviland
			  		 	University of Vermont
  haviland@emily.uvm.edu			(802)-656-2540 
            "Knowledge is no substitute for retractability"

roelofs@amelia.nas.nasa.gov (Cave Newt) (07/27/90)

In article <1587@uvm-gen.UUCP> haviland@emily.uvm.edu (tom haviland) writes:

>Does anyone out there know the current status of PKZIP?  I have version
>1.02, and I have seen a couple pkzip 1.10 versions on some bulletin
>boards, but I seem to recall that some version of pkzip had a virus
>in it.  Does anyone out there have the scoop on this?

v1.10 is the most recent official version.  v1.20 was a hack.  I don't
believe it had a virus in it, and I'm not even sure it was a Trojan,
but it definitely was not a Phil Katz release (and as a result of its
existence, there will be no official release with the version number
1.2).  Needless to say, Phil & Co. are less than pleased about the
whole affair...

Btw, you may see two different versions of 1.10 (PK110.EXE and PK110EU.EXE).
Both are legal (or rather, there exist two legal versions with those names);
the latter is the "European" release and doesn't contain the encryption
capability of the former.  Not surprisingly, the full version has been
sighted all over the world anyway... :)

mkiteam@osiris.cso.uiuc.edu (E.Japel) (07/27/90)

The current version is 1.10, direct from PKWARE on disk.

ganngre@tahoe.unr.edu (Greg) (07/27/90)

In article <1587@uvm-gen.UUCP> haviland@emily.uvm.edu (tom haviland) writes:
>Does anyone out there know the current status of PKZIP?  I have version
>1.02, and I have seen a couple pkzip 1.10 versions on some bulletin
>boards, but I seem to recall that some version of pkzip had a virus
>in it.  Does anyone out there have the scoop on this?
>
>Also, what are some of the good virus detection programs?  
>
>I'm starting to become a bbs junkie, so I figure I'd better protect
>myself...
>
>                                  tom
>
>
>
>	 					Thomas P. Haviland
>			  		 	University of Vermont
>  haviland@emily.uvm.edu			(802)-656-2540 
>            "Knowledge is no substitute for retractability"


  The following is the text from the warn posted on a local bbs:
-----------------------------------------------------------------------

05/12/1990  12:26pm CDT


WARNING!  WARNING!  WARNING!  WARNING!  WARNING!  WARNING!  WARNING!
--------------------------------------------------------------------

There is a file being circulated on BBS's called PKZ120.ZIP or
PKZ120.EXE or similar, and that claims to be version 1.20 of
PKZIP but in fact is a hacked version of PKZIP 1.10.

As of the date of this writing, the latest version of PKZIP is
version 1.10.  Furthermore, due to this intentional act of
vandalism, PKWARE will not release any versions of PKZIP in the
future with the version 1.20.

If you see the files PKZ120.ZIP or PKZ120.EXE on any BBS or
on-line system, please ask the SysOp of that system to remove
the files IMMEDIATELY, and please contact PKWARE to report
where the files were seen.


REWARD!
-------

PKWARE is offering a reward of lifetime free upgrades for PKZIP
to anyone who can provide information leading to the
identification and prosecution of the person or persons
responsible for creating this bogus version 1.20 of the
software.  They have only served to confuse and hurt the user
community, and the perpetrators of this crime are at minimum in
violation of Federal Copyright Law.

If you have any information about the source of PKZ120.EXE or
PKZ120.ZIP, please report it to PKWARE immediately, either:

by Voice at 414-352-3670
by BBS   at 414-352-7176
by FAX   at 414-352-3815
or by mail:

PKWARE Inc.
7545 N. Port Washington Rd.
Glendale, WI 53217


Sincerely,


        Phil Katz
        President, PKWARE Inc.

sherman@hpccc.HP.COM (Daniel P. Sherman) (07/28/90)

Thomas P. Haviland writes:

>Does anyone out there know the current status of PKZIP?  I have version
>1.02, and I have seen a couple pkzip 1.10 versions on some bulletin
>boards, but I seem to recall that some version of pkzip had a virus
>in it.  Does anyone out there have the scoop on this?

The last time I logged in to the Pkware BBS (I don't have the number
handy right now), there was a notice to the effect that a bogus program
called PKZ120.EXE was making the rounds, and that if anyone finds it,
delete it and report the source to Pkware.  PKZ120.EXE is not a real
version of PKZIP/PKUNZIP.  There will never be a release 1.20 because
of this bogus version that is floating around.

The latest real version of PKZIP/PKUNZIP is PKZ110.EXE (version 1.10).

You may still want to do some additional virus checking after obtaining
a copy of this program.  It depends on your level of trust in the source
of your download.


>                                          tom
>
>
>
>	 					Thomas P. Haviland
>			  		 	University of Vermont
>  haviland@emily.uvm.edu			(802)-656-2540 
>            "Knowledge is no substitute for retractability"
>----------


Dan Sherman
Hewlett-Packard Co.
sherman@hpccc.HP.COM