X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=CPHl2n9
	GONN9JrsGtmfspnYp1EifAlh8uBfupNKijn/sVY9yju7KR4xKfUxzXUWwizyFHFc
	uaY9CGnUXUQgk52aSrIFP5TUrGbxcDW2IkwU+VSTGEbOiXUyLmMAEbFfs6jLtl9q
	JREtVhoMVcv80/oG8YAMqJw5JnXTNM8mHTRI=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; s=default; bh=/K9CjOa9UEm6+
	OqYFM3/jOumVgo=; b=Ybqk4vcZlNy+LmQRRXBiwRpm7VZ9449vtli4k8Ic2Srpo
	yukCDF7zF516bfutd9q5FJOZI2MHdMBRUSQsAXqWMyunseVGc8yxi1VKNUbxu5rz
	jWsOaAhfueih63D3PSpqZh+TmnEaqr4prICyvMrPj+DBSuyo/HDiFgS9sZkybI=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2
X-HELO:	mail-qg0-f41.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:content-type; bh=ZbuhfLhlXMxfZcNY7PPL7jiqLfutmGjtXxNm6CH7kL4=; b=at1mirvDb4rTHlFTr/LRmQlczyIo/oKlLoq+mKJwp00Z8o3NX4UDN2HvvO6MYjufJd r6Cd/btGjRawZML4bv/f1agheHyFpFo93n0gzjjZ5ciQmyiErLe8KHmxxtZThblSbJzh qT4pIHMdx/QXYhUCcK6+NflcAIaHP4NEnnzHicf8TDf7BesGfBdTzrt7HpObxqdhue80 1J7JD0fIxKq0ewmU7xi24qYd6PPYsZjNE0I7hFkercAmZK61t33G4HUT1S2Ov3pNxGzB 1D6U8VJu4pI/0o+/J7HivVfjLYQSyZpvuJXel68gsE6J+849Enued3+N52DhugS05Vl0 n6XQ==
X-Gm-Message-State:	ALoCoQlcq7jJxnMoP3XDaUND2TUKxkCl/cg835KLi4NZTMiuHrGflx+CFahamW2RRglPl1V9Xo15
X-Received:	by 10.140.26.179 with SMTP id 48mr6635757qgv.51.1400186831579; Thu, 15 May 2014 13:47:11 -0700 (PDT)
MIME-Version:	1.0
In-Reply-To:	<20140515194537.GB1733@ednor.casa.cgf.cx>
References:	<1400181948 DOT 68721 DOT YahooMailNeo AT web121901 DOT mail DOT ne1 DOT yahoo DOT com> <20140515193629 DOT GA18612 AT tastycake DOT net> <20140515194537 DOT GB1733 AT ednor DOT casa DOT cgf DOT cx>
From:	Robert Pendell <shinji+cygwin AT elite-systems DOT org>
Date:	Thu, 15 May 2014 16:46:41 -0400
Message-ID:	<CAAeCd-MSgepSPPt9i_750nUHSZ-ry0ttb5E14t-synzLyP1GVg@mail.gmail.com>
Subject:	Re: setup-x86.exe has virus and is blocked by Malware Detectors
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes

On Thu, May 15, 2014 at 3:45 PM, Christopher Faylor wrote:
> On Thu, May 15, 2014 at 08:36:29PM +0100, Adam Dinwoodie wrote:
>>On Thu, May 15, 2014 at 12:25:48PM -0700, Wes Kaefer wrote:
>>> I agree, it probably does not have a virus; but it has a virus signature.
>>
>>This is covered in the FAQ at http://cygwin.com/faq.html#faq.setup.virus
>
> Thanks for pointing that out.  I should have remembered the FAQ.
>
> cgf
>

It is actually flagging the fact that setup.exe is packed using upx
since at one point (or maybe still) virus authors had packed their
binaries with upx in order to try to evade scanners.  Upx in itself
though is not a virus and the false flag should probably be removed by
the antivirus company.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -