From: ts@uwasa.fi (Timo Salmi)
Subject: Re: Virus Infection -- pkz204c.zip
Organization: University of Vaasa, Finland
Date: Thu, 7 Jan 1993 05:10:32 GMT

-Subject: Re: Virus Infection -- pkz204c.zip
-To: machteme@acpub.duke.edu (Mark Achtemeier)
-Date: Thu, 7 Jan 1993 07:06:47 +0200 (EET)
-From: ts

> 
> The new pkzip file needs to be removed from the archive immediately.
> I downloaded it this afternoon and encountered a virus upon running
> the pkzip.exe program.
> 
> Details are posted on the internet in the comp.compression forum.
> 
> Mark Achtemeier
> Duke University
> USA
> 
> machteme@acpub.duke.edu
> 

I have not any evidence to that effect, nor have I so far seen any
such a posting in comp.compression which would unambiguously support
your report, and would warrant the drastic action you suggest.  I
will nevertheless be careful and post your concerns to
comp.compression.  I will also be pleased to forward a copy of this
report to PKWARE, McAfee, and my fellow MsDos FTP site moderators so
that they can check the authenticity of what I have at Garbo.  Below
are multiple PC and Unix checksums for identification. 

While very much thanking you for your coming forward, Mark, and much
appreciateng that, you'll have to understand that I have to have
much more solid proof before I take any definite action. 

    All the best, Timo

VALIDATE 0.3 Copyright 1988-89 by McAfee Associates

          File Name:  g:pkz204c.exe
               Size:  188,818
               Date:  12-28-1992
File Authentication:
     Check Method 1 - 0DC8
     Check Method 2 - 045E

VALIDATE 0.3 Copyright 1988-89 by McAfee Associates

          File Name:  c:pkzip.exe
               Size:  41,462
               Date:  12-28-1992
File Authentication:
     Check Method 1 - 5E5F
     Check Method 2 - 0D06

VALIDATE 0.3 Copyright 1988-89 by McAfee Associates

          File Name:  c:pkunzip.exe
               Size:  28,806
               Date:  12-28-1992
File Authentication:
     Check Method 1 - C52F
     Check Method 2 - 1ACC

 Length  Method   Size  Ratio   Date    Time    CRC-32  Attr  Name
 ------  ------   ----- -----   ----    ----   -------- ----  ----
    537  DeflatX    306  44%  28-12-92  02:04  a15cfed3 --w-  README.DOC
    573  DeflatX    332  43%  28-12-92  02:04  d941b3b8 --w-  SHAREWAR.DOC
   2430  DeflatX   1140  54%  28-12-92  02:04  df651570 --w-  WHATSNEW.204
   3707  DeflatX   1499  60%  28-12-92  02:04  83f4432b --w-  LICENSE.DOC
   3456  DeflatX   1585  55%  28-12-92  02:04  376abf58 --w-  ORDER.DOC
  13700  DeflatX   4629  67%  28-12-92  02:04  9e8ac0b1 --w-  ADDENDUM.DOC
 191376  DeflatX  55173  72%  28-12-92  02:04  634b917d --w-  MANUAL.DOC
   2299  DeflatX    904  61%  28-12-92  02:04  d6b73e85 --w-  AUTHVERI.FRM
  41462  DeflatS  41007   2%  28-12-92  02:04  b29643f6 --w-  PKZIP.EXE
  28806  DeflatS  28453   2%  28-12-92  02:04  9b841eb4 --w-  PKUNZIP.EXE
   7672  DeflatS   7574   2%  28-12-92  02:04  eae15d4f --w-  PKZIPFIX.EXE
  27069  DeflatS  26220   4%  28-12-92  02:04  3d7640ca --w-  ZIP2EXE.EXE
   2750  DeflatX   2492  10%  28-12-92  02:04  bc15451f --w-  PKUNZJR.COM
    591  DeflatX    359  40%  28-12-92  02:04  d00756d3 --w-  OMBUDSMN.ASP
 ------          ------  ---                                  -------
 326428          171673  48%                                       14


garbo> unzip50 -vU pkz204c.exe
 Length  Method   Size  Ratio   Date    Time   CRC-32     Name
 ------  ------   ----  -----   ----    ----   ------     ----
    537  Deflate    306  43%  12-28-92  02:04  a15cfed3   README.DOC
    573  Deflate    332  42%  12-28-92  02:04  d941b3b8   SHAREWAR.DOC
   2430  Deflate   1140  53%  12-28-92  02:04  df651570   WHATSNEW.204
   3707  Deflate   1499  60%  12-28-92  02:04  83f4432b   LICENSE.DOC
   3456  Deflate   1585  54%  12-28-92  02:04  376abf58   ORDER.DOC
  13700  Deflate   4629  66%  12-28-92  02:04  9e8ac0b1   ADDENDUM.DOC
 191376  Deflate  55173  71%  12-28-92  02:04  634b917d   MANUAL.DOC
   2299  Deflate    904  61%  12-28-92  02:04  d6b73e85   AUTHVERI.FRM
  41462  Deflate  41007   1%  12-28-92  02:04  b29643f6   PKZIP.EXE
  28806  Deflate  28453   1%  12-28-92  02:04  9b841eb4   PKUNZIP.EXE
   7672  Deflate   7574   1%  12-28-92  02:04  eae15d4f   PKZIPFIX.EXE
  27069  Deflate  26220   3%  12-28-92  02:04  3d7640ca   ZIP2EXE.EXE
   2750  Deflate   2492   9%  12-28-92  02:04  bc15451f   PKUNZJR.COM
    591  Deflate    359  39%  12-28-92  02:04  d00756d3   OMBUDSMN.ASP
 ------          ------  ---                              -------
 326428          171673  47%                              14

garbo> sum pkz204c.exe
36332   185

..................................................................
Prof. Timo Salmi      Co-moderator of comp.archives.msdos.announce
Moderating at garbo.uwasa.fi anonymous FTP archives 128.214.87.1
Faculty of Accounting & Industrial Management; University of Vaasa
Internet: ts@uwasa.fi Bitnet: salmi@finfun   ; SF-65101, Finland