Jump to content

ACE (compressed file format)

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Daniel Roethlisberger (talk | contribs) at 18:02, 9 March 2019 (Explain relevance for malware distribution). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
This article is about the data compression format. For the file format specification used in genomics, see ACE (genomic file format).
ACE
Filename extension
.ace
Internet media type
application/x-ace-compressed
Developed bye-merge GmbH
Type of formatdata compression

In computing, ACE is a proprietary data compression archive file format developed by Marcel Lemke, and later bought by e-merge GmbH. The peak of its popularity was 1999–2001, when it provided slightly better compression rates than RAR, which has since become more popular.

WinAce

Main article: WinAce

WinAce, maintained by e-merge GmbH, is used to compress and decompress ACE files under Microsoft Windows. When installed, it lets the user choose between paying for a registration or installing WhenU SaveNow adware. e-merge GmbH also produces a Commandline ACE for DOS; and a freeware command-line interface decompression tool for Linux (i386) and macOS called "Unace". e-merge GmbH also provides several libraries for developers, including a freeware decompression DLL called "UnACE.DLL". Some third-party archivers can read the format using this DLL. None of the above is open source free software.

An older version of an Unace 1.2b is free software and licensed under the GPL by the author Marcel Lemke, but it cannot extract ACE archives from version 2.0 and newer.[1]

A newer version of Unace 2.5 that supports ACE 2.0 archives is available under a restrictive open source license, also by Marcel Lemke.[2]

On November 23, 2007, version 2.69 of WinACE was released, including a less-intrusive adware application, MeMedia AdVantage, which replaces WhenU. No other major changes are in this release.

Third-party support

Packing of ACE files is licensed as proprietary information and only available through WinACE, while unpacking of ACE files is supported by a number of third-party archivers. However, virtually all of them (the ones that support ACE 2.x format) do this by using the proprietary "Unace.dll" from e-merge GmbH. Since 2017, there is a BSD licensed python module that supports unpacking of ACE 2.x format archives.[3]

Use for malware distribution

Since at least 2015, ACE archives have been used to deliver malware to victims by e-mail. This tactic was viable because popular archiving software was able to uncompress ACE archives, but support for the ACE format in security products such as mail filters, web content filters and anti-virus software was generally weak.[4][5][6]

Security vulnerabilities

In February, 2019 several major security vulnerabilities were found in the unacev2.dll library which is used by WinRAR. Since WinACE is abandonware, users are advised against opening ACE archives in WinRAR and possibly other products using this library.[7]

See also

References

  1. ^ https://packages.debian.org/stable/utils/unace
  2. ^ https://packages.debian.org/stable/utils/unace-nonfree
  3. ^ https://pypi.python.org/pypi/acefile
  4. ^ "Malware sent in .ace format". Frank Leonhardt's blog. Retrieved 2019-03-09.
  5. ^ "Spammers discover the 7z archive format for spreading ransomware". IBM X-Force Exchange. Retrieved 2019-03-09.
  6. ^ "How to deal with .ACE malware files?". Marc Rivero López' blog. Retrieved 2019-03-09.
  7. ^ "Extracting a 19 Year Old Code Execution from WinRAR". Check Point Research. 2019-02-20. Retrieved 2019-02-26.
Retrieved from "https://en.wikipedia.org/w/index.php?title=ACE_(compressed_file_format)&oldid=886960612"