X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=l4tWLeZ4VpnxEJQypJ4K+aFGi3C4q
	C9t4dK2KEm6ylSk7jGDT6KN0q3ZLQ+O+zVC6/yeXelU+sIhcA9Fi2j1acEc7a0Bi
	qN1niuAt0E047VR/x0RYXlcLhr762KrvuaADbCiN3kWRf1nrC1q+B61NOq4nP6jV
	IXg0gEcnD8bMJE=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; s=default; bh=1jLYkwXejBZwws68WiFX81hduHk=; b=rxC
	cyXOPEhhR9BbVORX0zXJzGH096qcMMp/6bPA7BZFFrExmBtcKPcv5h4kL3kXgHpG
	6nLJ2SLJ5hPdhZpowBm8Rcai2YIeelu1khXFBYPW+M/sr5nr9A1Q91l3Qw9x1RUI
	pznze+UP4ZMf9pSaHe7ZUqMsfIDmL6QeZ9OEUsw4=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.9 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=no version=3.3.2 spammy=india, India, H*F:D*in, sincerely
X-HELO:	mail-lf0-f47.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=FVXDBDqsCAI0NFkdcwcPtRhXQiITzHIgKG/EW6psnkY=; b=r6y1Lhm1u2SC12h9oQr3htmnHPbZX5ngFa/EMdl9xjvsfcE4+7TUEhhoDbOZHX6aO0 0ZNlJ1Z3culJsHI/zfphsxdNsOJnjv1xQ26DYOHSDak2Jv7jcl7Goz3P9kNDC7SakyY0 jMT35cRHvihzW9Vvu4vBF8I0jIKS1kGBMkVrPJu/FcaG168IocCnpKXV7KYZ0rZdVZ/x ncdI3ljRgB4pu3E65s+ApH7OTS6VGYgMH+WfH7XR7wyYETCKAJrtueME3aIWZNyDvj+Z iJK3JL5S38fuxTDvpNczoGbl7mHnSZ0Y9YpTmlk3li0dzAeBCZnzvxP43p1iBySPsesZ Cc8g==
X-Gm-Message-State:	AKS2vOxld16FkLORu1wP97+vPcOVoDhjcL3qUvWrfjoYnDjH3P4mdjQ4 uOBR90rT882taJouRLyHa1v++sArtIEdliM=
X-Received:	by 10.46.1.209 with SMTP id f78mr3484094lji.55.1498666025413; Wed, 28 Jun 2017 09:07:05 -0700 (PDT)
MIME-Version:	1.0
From:	Sagar Kapadia <sagar AT cloudnineconsulting DOT in>
Date:	Wed, 28 Jun 2017 21:37:04 +0530
Message-ID:	<CAPXRkNEx44KFypaqj+hjrF+r8Es-xSmBTCcT2PED7XSrAchGNw@mail.gmail.com>
Subject:	XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission
To:	cygwin AT cygwin DOT com

HI,
I wish to report that Cygwin.XLaunch.exe is a Trojan and it allows
remote control of a pc without the users knowledge or permission. I
installed the cygwin package and the Xwindows server too. However,
today, I found somebody controlling my pc remotely. I know because the
mouse behaved erratically and then the XLanuch configuration screen
came up. I tried to kill it using the Task Manager but it would
restart. I had to reboot and turn off networking and then delete the
cygwin folder.

McAfee did not report this as a Trojan. I have written a mail to
McAfee notifying them of this issue.

I dont know if you are aware of this issue or not, but I found it
serious enough to report.

to summarize
XLaunch allows remote control of a pc without the users knowledge or permission.
Sincerely,
Sagar R. Kapadia,
India

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -