Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!rutgers!mcnc!rti!sunpix!matthew
From: matthew@sunpix.UUCP ( Sun Visualization Products)
Newsgroups: comp.binaries.ibm.pc.d
Subject: Re: Does Zoo have the Flu?
Summary: Could it be.....
Message-ID: <724@greens.UUCP>
Date: 27 Jul 89 13:54:19 GMT
References: <3109@uwovax.uwo.ca> <3187@uwovax.uwo.ca>
Organization: Sun Microsystems, Research Triangle Park, NC
Lines: 21


Could it be that Zoo triggers Flushot+ because it extracts the archived
file directly to its file name, while the other archivers, extract the
file to some intermeadiate file (like 'filename.$$$') and then renames
it.  It would explain why they don't trip the virus detection.  (This of
course is all theory, I haven't even looked at the code.)

As to why Flushot+ causes Zoo to stop dead, Flushot+ must not be 100% 
transparent to authorized writes.  Its altering something in the machine,
that is then causing Zoo to bomb.

Proper solution: inform the author of Flushot+, v.1.52 of the problem 
and be ready to provide a copy of Zoo and a zoo archive that causes the 
problem to occur.


-- 
Matthew Lee Stier                            |
Sun Microsystems ---  RTP, NC  27709-3447    |     "Wisconsin   Escapee"
uucp:  sun!mstier or mcnc!rti!sunpix!matthew |
phone: (919) 469-8300 fax: (919) 460-8355    |