Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<3DFB21EF.9030508@mscha.org>
Date:	Sat, 14 Dec 2002 13:19:59 +0100
From:	Michael Schaap <cygwin AT mscha DOT org>
User-Agent:	Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a) Gecko/20021212
X-Accept-Language:	en-us, en
MIME-Version:	1.0
To:	Jack Rose <jrose22 AT columbus DOT rr DOT com>
CC:	cygwin AT cygwin DOT com
Subject:	Re: How did I get it?
References:	<001d01c2a31a$2c55e8a0$6501a8c0 AT columbus DOT rr DOT com> <003801c2a350$d2995310$2a83883e AT pomello>
In-Reply-To:	<003801c2a350$d2995310$2a83883e@pomello>
X-Virus-Scanned:	at mscha.org by amavisd-milter (http://amavis.org/)

On 14-Dec-2002 10:11, Max Bowsher wrote:
> Jack Rose <jrose22 AT columbus DOT rr DOT com> wrote:
> 
> 
>>Could some tell me how the CYGWIN1.DLL ended up on my computer. It
>>seems to have just appeared at 3:09am yesterday and I know I wasn't
>>working at that time.
>>
>>Could this have been uploaded to my machine for malicious purposes?
>>If so, what else should I be looking for, besides a better firewall
>>and virus detector?
>>
>>Any information would be appreciated...
> 
> 
> Well, someone (apparently not you) installed Cygwin, or a program which uses
> a cut down Cygwin install to function.
> 

And this could indeed be a virus or worm.  There is at least one that 
includes cygwin1.dll:

http://vil.mcafee.com/dispVirus.asp?virus_k=99529

I'd certainly check your PC carefully for viruses, if I were you.

  - Michael


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -