X-Spam-Check-By:	sourceware.org
Message-ID:	<46CB0B09.40200@cox.net>
Date:	Tue, 21 Aug 2007 15:55:53 +0000
From:	Greg Chicares <chicares AT cox DOT net>
User-Agent:	Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Cygcrypt-0.dll ad-aware trojan alert
References:	<12256294 DOT post AT talk DOT nabble DOT com> <08db01c7e404$93ac6760$2e08a8c0 AT CAM DOT ARTIMI DOT COM> <08dc01c7e407$c2536de0$2e08a8c0 AT CAM DOT ARTIMI DOT COM>
In-Reply-To:	<08dc01c7e407$c2536de0$2e08a8c0@CAM.ARTIMI.COM>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 2007-08-21 15:27Z, Dave Korn wrote:
> On 21 August 2007 16:05, Dave Korn wrote:
> 
>> On 21 August 2007 15:52, PTBluster wrote:
>>
>>> I just ran Ad-aware and got a hit for the IROffer object which uses
>>> cygcrypt-0.dll. I've searched Ad-ware forum and with Google but could not
>>> find much. I think cygcrypt-0.dll is a legit library file so I am wondering
>>> if this hit is significant?
>>   Almost certainly a false alarm... hang on, I'll update my .def file and check
>> for you.
> 
>   Reproduced.  Yep, it's a false alarm.  md5sum still the same as
> freshly-extracted copy from the package tarball.

FWIW, I ran 'cygcrypt-0.dll' with md5sum fcaaad96b6b4e41dbaf9076109dcb964 through
  http://virusscan.jotti.org/
and its twenty malware scanners all found nothing. Perhaps that helps if the OP
wishes to report this false positive to Ad-aware.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -