Subject: PKZIP300B Trojan Horse Advisory (fwd)

From: "Rod Larson" <[email-masked]>
Date: Tue, 13 Feb 96 16:18:28 -0600

From: "Henry Miller" <[email-masked]>
Date: Tue, 13 Feb 96 18:50:23 UT
To: "Robert H. Starr" <[email-masked]>
Subject: RE: PKZIP300B Trojan Horse Advisory (fwd)

	To the best of my knowledge, this IS NOT a hoax, and should be takern 
seriously...

-HWM

Subject: PKZIP300B Trojan Horse Advisory
Author:  Woody_Harold_E at P-PMS422
Date:    2/8/96 8:06 AM

     Unlike the bogus 'Good Times' warning, this one is real.  If you are in 
     the habit of downloading neat looking new utilities, beware of this 
     supposed new version of PKZIP.  It's not exactly new but it is 
     apparently making the rounds again.  Most reliable sources will catch 
     things like this before making them available for download, but the 
     smaller bulletin boards and web sites don't check files as well.  This 
     is a good one to pass on to other family members as you are more likely 
     to see this at home than in the office.
     
     This is a 'trojan horse' rather than a virus and won't be detected by 
     your anti-virus package.

______________________________ Forward Header 

Subject: PKZIP300B Trojan Horse Advisory
Author:  Doering_Chip at P-TECHMATICS_CC1 
Date:    2/7/96 5:16 PM

Security Advisory - PKZ300B Contains a Trojan Horse 
     
The Australian Computer Emergency Response Team (AUSCERT)
has received information that a file is being distributed on the 
Internet and on various dial-up BBS systems which claims to be version 
3.00G of PKWARE Inc.'s shareware DOS data compression utility, PKZip.
     
The file is being distributed as PKZ300B.EXE and in zipped form
as PKZ300B.ZIP. AUSCERT has confirmed that this file is a self-extracting 
archive which contains a trojan horse. AUSCERT has confirmed that
the trojan horse will destroy all data on the PC's hard drive. 
A trojan horse is a piece of software which claims to do one thing but in 
reality does something different, usually something malicious. If the 
trojan horse is executed, all data on the PC hard drive will be destroyed. 
This is not a virus; it cannot infect other machines unless it is manually 
run on those machines.
     
Do not download or execute any file named PKZ300B.EXE or PKZ300B.ZIP. Do 
not execute any of the files created by PKZ300B.EXE. PKWARE Inc. have 
confirmed that the latest release of PKZip is v2.04G. There is no release 
of a version 3.00 from PKWare.

--IMA.Boundary.989402428--

           M            [email-masked] *~*~*~*~*~*
          A M           #        or [email-masked]           #
         S   A          #     Rod Larson, PGM, A.F.&A.M. of Minn      #
        T     S         # smail: 1918-149th Ave NE, Ham Lake,MN 55304 #
    F  E       O  N     #   What we have done together is more than   #
      R         N       # what we have done, because it was together. #
     *   O   I   *      *~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*
    *      M      *   PM,PM/MOVPER,PWM/AASR,KCCH,PSM/AMD,PP/NS,PP/MCME,PGM