Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!csd4.milw.wisc.edu!lll-winken!uunet!ncrlnk!ncr-sd!hp-sdd!hplabs!hp-ses!hpcea!hpbsla!eboston
From: eboston@hpbsla.HP.COM (Ed_Boston)
Newsgroups: comp.binaries.ibm.pc.d
Subject: Viruses and LZARC
Message-ID: <2530005@hpbsla.HP.COM>
Date: 13 Apr 89 14:03:07 GMT
Organization: Hewlett-Packard Boise R & D Lab
Lines: 26

With all the talk of which compression format to change to, I would like
to take a moment and transfer some information about the program LZARC.

I have seen a couple of messages about how LZARC might be slower than most
other program, but it creates smaller files.  Also, it has the ability to
create self-running COM files.  It is this last part I wish to address.

I am fairly active on the PC based BBS systems.  There has been a lot of
discussion as to which program to use on these systems.  A lot of users and
sysops liked the LZARC program because it produced smaller code.  However,
as time went on, the ability to create self-running COM files were discovered
and the feeling about LZARC changed.  This function now allow people with a
warped sense of humor, a simple way of infecting disks with a virus.

What can happen is the person could get a hold of a normal GOOD program and
add thier virus as a self-running COM file.  Now you go and un-compress the
file, the virus runs, picks a file to attach onto and now your in trouble.
Because of this, there have already been several programs written to de-fuse
the LZARC programs.

Because of this problem, I would suggust not using LZARC unless you have 
placed safegards against viruses and trojans on your system.  I vote against
LZARC or any program that allows self-running programs.

Ed Boston
eboston@hpbsla.HP.COM