NODE 2508ace7Trojan Horse Loose On The Internet
wolv@infosys.utm.my (Ramli Bin Jaafar)Mon, 15 Apr 1996 19:29:27 +0800
According to several reliable sources there is a deadly virus on the
Internet. This is NOT a hoax!
CAN ANYBODY CHECK THIS OUT, PLEASE..
Note: The reliability of all information below is UNKNOWN.
WHAT:
Virus Alert: PKZIP 3.0 Trojan Loose on the Internet
BACKGROUND:
A trojan (virus) program, PKZIP 3.0, which is advertised as an updated
version of the popular compression utility PKZIP, is currently being
distributed on the Internet. Please note that this trojan is REAL and
DESTRUCTIVE. Once executed, this program will destroy data on your hard
drive; there's no stopping it.
According to PKWARE, makers of PKZIP, the only released versions of PKZIP
are: 1.10, 1.93, 2.04c, 2.04e and 2.04g. All other versions currently
circulating on the Internet are suspect and should not be used.
ACTION REQUIRED:
Please do not download or execute any files that are named PKZ300B.EXE,
PKZ300B.ZIP, PKZIP300.ZIP, PKZIP300.EXE, etc. from the Internet or other
external source.
Anybody with any information on this..??
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Best Regards,
_\|/_
Q(@ @)Q
|-------------------oOO-(_)-OOo--------------------|
| If I can, it doesn't mean that I will. |
|--------------------------------------------------|
| Ramli Bin Jaafar |
|Faculty Of Computer Science And Information System|
| University Technology Of Malaysia, |
| 80990 Johor Baharu, |
| Johor Darul Takzim, |
| Malaysia. |
| Tel: (607)-5576160 ext: 3593 |
|--------------------------------------------------|
| E-mail: wolv@infosys.utm.my |
| ramli@raptor.utm.my |
| wolv@cyberspace.org |
|--------------------------------------------------|
NODE 8d4b4f9dRe: Trojan Horse Loose On The Internet
Doug Hughes <Doug.Hughes@Eng.Auburn.EDU>Tue, 16 Apr 1996 02:24:31 +0800
>
>According to several reliable sources there is a deadly virus on the
>Internet. This is NOT a hoax!
>CAN ANYBODY CHECK THIS OUT, PLEASE..
>
>Note: The reliability of all information below is UNKNOWN.
>
>WHAT:
>Virus Alert: PKZIP 3.0 Trojan Loose on the Internet
>
>BACKGROUND:
>A trojan (virus) program, PKZIP 3.0, which is advertised as an updated
>version of the popular compression utility PKZIP, is currently being
>distributed on the Internet. Please note that this trojan is REAL and
>DESTRUCTIVE. Once executed, this program will destroy data on your hard
>drive; there's no stopping it.
>
>According to PKWARE, makers of PKZIP, the only released versions of PKZIP
>are: 1.10, 1.93, 2.04c, 2.04e and 2.04g. All other versions currently
>circulating on the Internet are suspect and should not be used.
>
>ACTION REQUIRED:
>Please do not download or execute any files that are named PKZ300B.EXE,
>PKZ300B.ZIP, PKZIP300.ZIP, PKZIP300.EXE, etc. from the Internet or other
>external source.
>
>Anybody with any information on this..??
100% true and verifiable. Although I wouldn't call it deadly or rampant,
it has been making the rounds of late. Mostly it's victims are new users.
After all, how many times have you upgraded your copy of pkzip? ;)
--
____________________________________________________________________________
Doug Hughes Engineering Network Services
System/Net Admin Auburn University
doug@eng.auburn.edu
Pro is to Con as progress is to congress
NODE bc908ea2Re: Trojan Horse Loose On The Internet
Rabid Wombat <wombat@mcfeely.bsfs.org>Tue, 16 Apr 1996 13:43:12 +0800
This one has been around for ages, but the story seems to be making the
rounds once again.
See PKWARE's web site:
http://www.pkware.com/fake.html
(posted May, 1995)
----------------------------------------
Rabid Wombat
wombat@mcfeely.bsfs.org
----------------------------------------
On Mon, 15 Apr 1996, Doug Hughes wrote:
>
> >
> >According to several reliable sources there is a deadly virus on the
> >Internet. This is NOT a hoax!
> >CAN ANYBODY CHECK THIS OUT, PLEASE..
> >
> >Note: The reliability of all information below is UNKNOWN.
> >
> >WHAT:
> >Virus Alert: PKZIP 3.0 Trojan Loose on the Internet
> >
> >BACKGROUND:
> >A trojan (virus) program, PKZIP 3.0, which is advertised as an updated
> >version of the popular compression utility PKZIP, is currently being
> >distributed on the Internet. Please note that this trojan is REAL and
> >DESTRUCTIVE. Once executed, this program will destroy data on your hard
> >drive; there's no stopping it.
> >
> >According to PKWARE, makers of PKZIP, the only released versions of PKZIP
> >are: 1.10, 1.93, 2.04c, 2.04e and 2.04g. All other versions currently
> >circulating on the Internet are suspect and should not be used.
> >
> >ACTION REQUIRED:
> >Please do not download or execute any files that are named PKZ300B.EXE,
> >PKZ300B.ZIP, PKZIP300.ZIP, PKZIP300.EXE, etc. from the Internet or other
> >external source.
> >
> >Anybody with any information on this..??
>
> 100% true and verifiable. Although I wouldn't call it deadly or rampant,
> it has been making the rounds of late. Mostly it's victims are new users.
> After all, how many times have you upgraded your copy of pkzip? ;)
>
> --
> ____________________________________________________________________________
> Doug Hughes Engineering Network Services
> System/Net Admin Auburn University
> doug@eng.auburn.edu
> Pro is to Con as progress is to congress
>
NODE c7afcc4eRe: Trojan Horse Loose On The Internet
Jonathon Blake <grafolog@netcom.com>Tue, 16 Apr 1996 14:45:46 +0800
On Mon, 15 Apr 1996, Doug Hughes wrote:
> >Virus Alert: PKZIP 3.0 Trojan Loose on the Internet
Please don't confuse a trojan horse with a virus.
> 100% true and verifiable. Although I wouldn't call it deadly or rampant,
> it has been making the rounds of late. Mostly it's victims are new users.
Isn't this trojan << PKZip 3.0 >> about 4 years old?
> After all, how many times have you upgraded your copy of pkzip? ;)
10 times. << Went thru the 204 alphabet of bug fixes. :-( >>
xan
jonathon
grafolog@netcom.com
**********************************************************************
* *
* Opinions expressed don't necessarily reflect my own views. *
* *
* There is no way that they can be construed to represent *
* any organization's views. *
* *
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
* ftp://ftp.netcom.com/pub/gr/graphology/home.html *
* *
* OR *
* *
* http://members.tripod.com/~graphology/index.html *
* *
***********************************************************************
NODE a6103ed6Old Trojan news [Re: Trojan Horse Loose On The Internet]
Jim Gillogly <jim@ACM.ORG>Tue, 16 Apr 1996 03:03:51 +0800
wolv@infosys.utm.my (Ramli Bin Jaafar) writes:
>According to several reliable sources there is a deadly virus on the
>Internet. This is NOT a hoax!
>CAN ANYBODY CHECK THIS OUT, PLEASE..
>Note: The reliability of all information below is UNKNOWN.
Uhh -- then perhaps you should check it out before doing the alarmist
number. Appropriate places are the VIRUS-L mailing list or comp.virus...
or the VIRUSPUNKS list, if you can find the right majordomo.
>WHAT:
>Virus Alert: PKZIP 3.0 Trojan Loose on the Internet
This trojan was constructed a couple of years ago, and the warning report
goes around every few months; we're currently in the middle of another
resurgence. It's like the Good Times Virus, except that there really is
a trojanized PKZIP... but I haven't seen a confirmed sighting of it or
a report of somebody actually being bitten for many yonks now.
There are plenty of current and active viruses and trojan horses, and some
crypto relevance with some of them (e.g. KOH and encrypting viruses)... but
this isn't one of them.
Jim Gillogly
Trewesday, 25 Astron S.R. 1996, 15:13
NODE 8bac516aRe: Trojan Horse Loose On The Internet
"Paul S. Penrod" <furballs@netcom.com>Tue, 16 Apr 1996 16:50:22 +0800
Yes, the PKZIP 3.0 virus does exist, but it is a trojan, not a virus. You
have to run the program - then it does a dance on your disk with less
than pleasurable results. The latest official version of PKZIP I know of is
2.04g. Any other version greater than this should be suspect.
...Paul
-------------------------------------------------------------------------
"Faced with the choice between changing one's mind and proving that there
is no need to do so, almost everybody gets busy on the proof"
-- John Kenneth Galbraith
"Success is attending a funeral as a spectator"
-- E. BonAnno
-------------------------------------------------------------------------
On Mon, 15 Apr 1996, Ramli Bin Jaafar wrote:
> According to several reliable sources there is a deadly virus on the
> Internet. This is NOT a hoax!
> CAN ANYBODY CHECK THIS OUT, PLEASE..
>
> Note: The reliability of all information below is UNKNOWN.
>
> WHAT:
> Virus Alert: PKZIP 3.0 Trojan Loose on the Internet
>
> BACKGROUND:
> A trojan (virus) program, PKZIP 3.0, which is advertised as an updated
> version of the popular compression utility PKZIP, is currently being
> distributed on the Internet. Please note that this trojan is REAL and
> DESTRUCTIVE. Once executed, this program will destroy data on your hard
> drive; there's no stopping it.
>
> According to PKWARE, makers of PKZIP, the only released versions of PKZIP
> are: 1.10, 1.93, 2.04c, 2.04e and 2.04g. All other versions currently
> circulating on the Internet are suspect and should not be used.
>
> ACTION REQUIRED:
> Please do not download or execute any files that are named PKZ300B.EXE,
> PKZ300B.ZIP, PKZIP300.ZIP, PKZIP300.EXE, etc. from the Internet or other
> external source.
>