Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!ucbvax!bloom-beacon!eru!hagbard!sunic!isgate!krafla!frisk
From: frisk@rhi.hi.is (Fridrik Skulason)
Newsgroups: comp.binaries.ibm.pc.d
Subject: Re: Edit Trojan ?
Message-ID: <3232@krafla.rhi.hi.is>
Date: 8 Jun 91 13:13:05 GMT
References: <1991Jun6.112857.1017@rtf.bt.co.uk>
Reply-To: frisk@rhi.hi.is (Fridrik Skulason)
Organization: University of Iceland (RHI)
Lines: 16

In article <1991Jun6.112857.1017@rtf.bt.co.uk> duplain@rtf.bt.co.uk (Andy Duplain) writes:
>Hi,
>	After unpacking EDIT from ibm.binaries.ibm.pc I discovered sometime
>	later that it possibly had a 'Evil-Dropper Trojan' in EDIT.EXE..
>	(As according to Dr Solomons Virus Toolkit)... Is this just me or
>	DOES edit have this Trojan for real ???

It does not!

This is an incorrect message, which just indicates that the program was
packed by LZEXE.

-frisk

Fridrik Skulason                 Technical Editor of the Virus Bulletin (UK)  
(author of F-PROT)               E-Mail: frisk@rhi.hi.is    Fax: 354-1-28801