X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=XFAIENgAYOu4cgIAbcfSWqC7Xfb1T
	Pv9pCkS3XIu8hGMbHeB/pDDvkbkbDPC03qSVoR8v7OKF2jB+C3vm+TrZKFmgSlGw
	6bByQr+dkIX9+3g9dSc0gh7Nu7H3NmsdLmqeZnY08gJYBdO+bovmBf/bdplfC1rg
	GS54BhwWOUG/xk=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; s=default; bh=82PTl6ppkjQyPkN+j4WXSTszzgc=; b=PH5
	dg0iLuHyo0RSqvLdTNQJUe8GssJqDCAmHkrMX7fR3A/Ytxza3zX8GDJklk673745
	7bqgvtE2vqKUg9hyS+zmPZzLP2eFxmI4OwHQfayCGbPeA+ganCsz1ua7TqPm7yAA
	uIGEBuZLENYb81mygaZLgO2gx/wF+GHGYuTz6QU0=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.2 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=no version=3.3.2 spammy=india, India, H*F:D*in, sincerely
X-HELO:	mail-lf0-f48.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=KwpGYojV5uczA8jUpsSUjIzHlxav+GS46DtLe3VcSyM=; b=jLMSmlnoPMeq433NemyPUaJEOc+HpsYhpX/Tps+Qj8/tGJHw8B4N1VLhVMa2mevFBa a82eRjdTOW3mSKVbmQYuc7kKpPOHeWINUA52dhWaU/WgqSv4wnpEqUYaMElunEJ6h8ZL e4u3oCKqj/ML50ZuiL4q2CigGeRCecgmbk2oMVEaSPOx27+GV4OKjcliiAt8XxQO+1hA HRIuFF3Uo9KgNbCmTsAGos3Ej99Ls5QDWNEwLZAu66c0R/7mcq3gVZ25BU/coUl+WZO/ zqkIJzXaZBqf1YU82bh9kpIxGd8ih/glkkjgiBARXIdm3Pzl7FO3Cut9IOldybGwchLf nbuw==
X-Gm-Message-State:	AKS2vOwmS+Uko7cFSe0q3BWdb+t9GfFcINdzPKRK18qVwHucF8E56otA nhzM1FVxgFDy7KGlBwtUu7YYwFhdWtn/
X-Received:	by 10.25.190.83 with SMTP id o80mr3906030lff.87.1498667205222; Wed, 28 Jun 2017 09:26:45 -0700 (PDT)
MIME-Version:	1.0
From:	Sagar Kapadia <sagar AT cloudnineconsulting DOT in>
Date:	Wed, 28 Jun 2017 21:56:44 +0530
Message-ID:	<CAPXRkNH7QPGrSVtiwLvZ9ZF3rmEGy=Q4R3VxwY=JU0SBZVZH+A@mail.gmail.com>
Subject:	Re: XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission [Reference Link]
To:	cygwin AT cygwin DOT com

http://www.file.net/process/xlaunch.exe.html

On Wed, Jun 28, 2017 at 9:37 PM, Sagar Kapadia
<sagar AT cloudnineconsulting DOT in> wrote:
> HI,
> I wish to report that Cygwin.XLaunch.exe is a Trojan and it allows
> remote control of a pc without the users knowledge or permission. I
> installed the cygwin package and the Xwindows server too. However,
> today, I found somebody controlling my pc remotely. I know because the
> mouse behaved erratically and then the XLanuch configuration screen
> came up. I tried to kill it using the Task Manager but it would
> restart. I had to reboot and turn off networking and then delete the
> cygwin folder.
>
> McAfee did not report this as a Trojan. I have written a mail to
> McAfee notifying them of this issue.
>
> I dont know if you are aware of this issue or not, but I found it
> serious enough to report.
>
> to summarize
> XLaunch allows remote control of a pc without the users knowledge or permission.
> Sincerely,
> Sagar R. Kapadia,
> India

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -