X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-3.6 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS
X-Spam-Check-By:	sourceware.org
To:	cygwin AT cygwin DOT com
From:	Erik <cygwin AT stealth DOT demon DOT nl>
Subject:	Re: Virus on sed.exe
Date:	Fri, 10 Jul 2009 06:12:57 +0000 (UTC)
Lines:	29
Message-ID:	<loom.20090710T061017-31@post.gmane.org>
References:	<4A555ABC DOT 6020401 AT gmail DOT com> <4A55ED43 DOT 9030407 AT ebrady DOT net> <B33B8C07661B413F90AEBF303C181019 AT phoenix> <loom DOT 20090709T153527-129 AT post DOT gmane DOT org>
Mime-Version:	1.0
User-Agent:	Loom/3.14 (http://gmane.org/)
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Erik <cygwin <at> stealth.demon.nl> writes:

> Hi,
> 
> Same problem here. eTrust Antivirus detected 106 files within my Cygwin
> directory which are 'infected' by Win32/AMalum.ZZ<xyz>. I think these are false
> positives. We have a rigorous policy concerning the security of our systems. No
> files can easily get onto our system. No other files on my system are infected
> according to eTrust Antivirus. Would be odd if only Cygwin files are infected.
> 
> I have reported this to CA (8 hours ago), but they have not responded yet.
> 
> Don't have md5sums (and can't create them anymore .
> 
> Cheers,
> Erik


Hi,

Although no report back from CA, the current Virus Signature (version
31.6.6606.0) seems to have solved the problem.
No more 'infected' files in my Cygwin install. Just have to rename back al
<filename>.0.AVB files... :-/

Cheers,
Erik




--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -