Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!mips!pacbell.com!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: microsoft!c-rossgr@uunet.uu.net Newsgroups: comp.virus Subject: re: PKLITE and hidden virus (PC) Message-ID: <0001.9104101503.AA06496@ubu.cert.sei.cmu.edu> Date: 8 Apr 91 17:02:51 GMT Sender: Virus Discussion List Lines: 28 Approved: krvw@sei.cmu.edu >Date: Fri, 15 Mar 91 16:12:59 -0500 >From: Jim Pinson > >I know some of the virus scanners will look within executable files >that have been compressed with LZEXE. I believe they scan both before >and after expansion. > >Lately I have been using PKLITE to compress executables, and wonder if >any Virus scanners are capable of looking within the compressed files. > >Does anyone have any info on the subject? Jim, by the time you read this the next demo version of the Virex-PC scanner should be available. Virex-PC now handles PKLITE compressed files as well as LZEXE compressed files. Next step: LH compressed and .ZIP files. I should have responded to this earlier, but I've been in "one-last-bug" mode for the last month. The demo gets released today - -- just writing the final cut of the docs for it. The old one handled 150 strings, this one handles 350. The old one was faster, so's this one. Grab a copy, and lemme know what you think? Oh! I convinced The Powers That Be at Microcom to let me release monthly (or near monthly) updates of the free scanner. Stay tuned! Ross M. Greenberg Author, Virex-PC & FLU_SHOT+