TIP: Click on subject to list as thread! ANSI
echo: virus_info
to: ROD FEWSTER
from: WAYNE CHIRNSIDE
date: 1997-03-28 12:14:00
subject: ANOTHER WEIRD IDEA...

RF>MSGID: 3:640/886@fidonet 2a94d0f4
RF>REPLY: 1:320/2600.0 33360963
RF>PID: FM 2.02
RF>TID: FastEcho 1.45a 15000
RF> >         Here's a weird one that I just thought of...
RF> >         Would it be possible to imbed some executable code into the 
ZIP
RF> > comment that is in many .ZIP files that shows up before it's unzip'd
RF> > (not the ones that show up after). I have been able to imbed ANSI as 
well
RF> > as control characters (BELL, TAB, and so on) in mine, but I wonder if I
RF> > changed it to binary, if it would infect/load when the file was 
zip'd.
RF> >         Ideas anyone?
RF>A .zip trojan using embedded ANSI as a comment has been around for
RF>years.  If you're using ANSI.SYS (does ANYONE still use ANSI.SYS ?)
RF>it will format your HD while you're unzipping the archive.
RF>---
mayhaps you could enlighten me as to which replacements of which you
speak. i did use a replacement for a time but it gave me a wierd problem
where my screen would have residual highlighted areas. if you can take
the time to reply i would appreciate it. i keep  a fairly current backup
on a second physical drive and some utilities on a disk just for the little
rascals that so like to wreak havoc. also someplace safe to obtain
source code for viruses would be nice so i may examine and perhaps better
protect myself by revising my anti-virus protocols. for obvious
reasons if you choose to reply do so at tagline, or just ansi replacement.
---
 þ SLMR 2.1a þ kevlar@gte.net
--- FLAME v1.1
---------------
RF> * Origin: --==[ Secure Antivirus Systems International ]==-- (3:640/886)
* Origin: Tampa Bay Computer Society * (813)298-8693 (1:3603/570)

SOURCE: echomail via exec-pc

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.