Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<3C6EB47F.2080502@ece.gatech.edu>
Date:	Sat, 16 Feb 2002 14:35:27 -0500
From:	Charles Wilson <cwilson AT ece DOT gatech DOT edu>
User-Agent:	Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
X-Accept-Language:	en-us
MIME-Version:	1.0
To:	Brian & Sara Feather <bfeather AT msn DOT com>
CC:	cygwin AT cygwin DOT com
Subject:	Re: backdoor.egghead trojan in zlib-1.1.3.tar.gz
References:	<002401c1b6fa$b0719ec0$010aa8c0 AT emachine>

Sigh.

False positive.

Reported 27 times already.  Multiple postings over the last three days. 
  Every single one was a FALSE positive.  Complain to symantec.

And next time, *you* check the archives.

--Chuck

P.S. When posting on an archived public mailing list, you probably don't 
want to include your home phone number.  Talk about bad ideas...

Brian & Sara Feather wrote:

> Hello,
> 
> I've got some BAD news. Norton just found a copy of backdoor.egghead in 
> latest/zlib/zlib-1.1.3.tar.gz of the installation files for Cygwin that 
> I downloaded last month (January 10). Norton also found the trojan in 
> d:\cygwin\bin\cygz.dll and in c:\windows\temp\usr_bin_cygz.dll (twice at 
> different times). It is also in several A00*.CPY files in 
> c:\_RESTORE\TEMP. I have Windows ME 4.90.3000 . I have attached a copy 
> of "cygcheck -s -v -r > cygcheck.out". I will deal with the virus 
> problem. I don't think it can fully activate on Windows ME. My biggest 
> concern are the several WIN2000 machines at work that may now be 
> infected (shake, tremble, fear).
> 
> Please check your archives I have also included the setup.log from the 
> original download.



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -