X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 888CB395A455
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1670460444;
	bh=XXB5lIEpO/L9Ufoit93Z/P3F4TsApsfDz+xnl4+dLdI=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=gaJNZiKkpG9piWe6ga6sNYHBvuLKS3nTAAz9rlEr19o83jKsY7wlgdXpuvDKcphn9
	kRQEoD+dw4piHvDPATnZx8YGGre+NiV52PK1VcyruFSyBPBiTn0SjvjC3LNOfYVgqt
	BLNe7snC8IRPdZs9ydU+BA4HnA6StbP1XdosO8wE=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org B045B395B068
X-Gm-Message-State:	ANoB5pmHTYh/4CKgfI7RXc5TxJRWJ5rtIrs4SPQekk7r8waxkV/ktQWR
	NWsWTZibZMRPV91H0WzFzBj37gM0I5dGSxch5C8=
X-Google-Smtp-Source:	AA0mqf6Y5C9FJOioeZ+Bx2Dzivc6TmF5AOTvj9ncZ21jhspqHOZog4eDYDux81WlKSiumHJkt63b9fUXnOrx4BTHC6E=
X-Received:	by 2002:ac8:1109:0:b0:3a5:ef4:675d with SMTP id
	c9-20020ac81109000000b003a50ef4675dmr71516433qtj.409.1670460403527; Wed, 07
	Dec 2022 16:46:43 -0800 (PST)
MIME-Version:	1.0
References:	<AS8PR07MB714100AE9CFC6D5AAEE34179D91A9 AT AS8PR07MB7141 DOT eurprd07 DOT prod DOT outlook DOT com>
In-Reply-To:	<AS8PR07MB714100AE9CFC6D5AAEE34179D91A9@AS8PR07MB7141.eurprd07.prod.outlook.com>
Date:	Wed, 7 Dec 2022 17:46:17 -0700
X-Gmail-Original-Message-ID:	<CANV9t=Qpm3W3weZDr0x5mDUBBpDq9s2Q6JURSSRzZfX9aFpUPQ AT mail DOT gmail DOT com>
Message-ID:	<CANV9t=Qpm3W3weZDr0x5mDUBBpDq9s2Q6JURSSRzZfX9aFpUPQ@mail.gmail.com>
Subject:	Re: Cygwin setup reporter as malware
To:	cygwin AT cygwin DOT com
X-Provags-ID:	V03:K1:d7hCVkl8RJOKQGT6HVf7mwzeZBbPkTibyPxGP+Xj2N+Yo7rSPfb
	RXuFzxT8WdLRRVhd1DGZo198rYJST/LkOjHJHwPVlhq5XCI0P9M1ZgoBUvH6/Wg63PxAFLC
	w3Xdu1ejYlWVbhl5MV+gSFWZUTvM1Tr/wHb5/rJ0HjFGTxH5uI4dOlh920Bn8zEO2OwxeYE
	LiRmOoesKjH6Yi1h4Q37Q==
UI-OutboundReport:	notjunk:1;M01:P0:1fRh896otEc=;6TfoW0eF+B8tH/ZTDVb4tYTl7s+
	it2rDPzAFpGICtQBb8pxfvBkzKB6X8bxEtph+FI/S4ml5dPTSSNCWVGaE5WQcDk+EJgi2m/On
	z3PBw2VRzXJl6jmTMh9W6E/1DJxM8t4joET6fXnFR9uv5mFiuY3whwC4oeQYrnT6zgHnV9/Nu
	lrDB9/qKsGCrEx2Qg80c96OkWG3/prDHvCKbVhm/Ym6vD4pFjRkCTdU8btzyJ/cHVbD9beSVr
	pxsHLBhLQy1/AJD5YefoaWibLgMbFiotFKx6upjuVvvjO4GdsSMeZwhr2dv3VDCR1mipSelL/
	2VvukWuUdW0sX4I2Wx8/1WJcULRju0KdYDkNkrkx5SNT6oUELVcJDOpW/fHEkqNAQRxyX8RSY
	QVGQ4X2JmDghVSIAeFCKahQpQOADvaBVSk2turXVeTfsh6gr73CJMLo/VSCNI2L0F3uY+sS1b
	NG5ddrrmv8WdVLG3oW4bipQ2ZJEG8P792WHwzo21e1DtPfH352RKTaDY+NbhF45e5PzPtdGvy
	jcHpzi8GMfRojZKrCgjIIWijP7itIonEsdHXyA4fAOSMvsHKSYKSlXgbzV4DxjzxCazdj/Oqe
	PpcnCK81XQ/M3nciJ52t84A9Ajgab3/8zbENN4I5bFgSX9oAVV3Jw0NxK6DvFga7WTpydXC7R
	y6vyCfK+v3Ws6GtNg0a+Gmt7b2o+9tAzLVjX8iRLLqKp7IMS/KabdSYnMTAVJrOKre+991CWF
	/5cmk9S+MomIlGersx7DpbB6/thArZJSrKbDin0eeYIFU+eP+K0KhguVcitl2Tg6lXqfyNScO
	Y6sj9tzW+eTD/+bvu7gi4Ce7QWZmWJkO/1hTwbpkmg52TkbKwqynsLYHTcHxU/UnWCB6Jayky
	ooyHlwm1adhjbafvcnvVcESMXjx4vQA9UMXd2OdBK0UVwm8YgPB7bWUfpRR4wEBinPdnGKcgt
	CemVtgsvIkxmNYx9xf4n+8AIpt8=
X-Spam-Status:	No, score=-2.6 required=5.0 tests=BAYES_00, FREEMAIL_FROM,
	HTML_MESSAGE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2,
	SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Bill Stewart via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Bill Stewart <bstewart AT iname DOT com>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Wed, Dec 7, 2022 at 9:21 AM Sylwester Rutkowski wrote:

The setup-x86_64.exe is reported as malicious at
> https://www.virustotal.com/gui/file/edd0a64dc65087ffe453ca94b267169b39458a983b29ac31320fcaa983d0f97e/detection
>
> Can this be resolved somehow?


This is, of course, a false positive.

There are basically two things you can do:

1. Exempt it from your scanner.

2. Report it to the vendor as a false positive.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -