X-Recipient: archive-cygwin@delorie.com X-Spam-Check-By: sourceware.org From: "Dave Korn" To: References: <48C4B480.5030003@sellers.com> <48CF70E1.90008@sellers.com> Subject: RE: Why is regedit referenced? Date: Tue, 16 Sep 2008 10:10:58 +0100 Message-ID: <007f01c917dc$21ce4520$9601a8c0@CAM.ARTIMI.COM> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 In-Reply-To: <48CF70E1.90008@sellers.com> Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com John Sellers wrote on 16 September 2008 09:40: > I don't know if it is related, but today I ran a scan with Kaspersky > Internet Security 2009, and it reported that a couple of files in the > cygwin directories were infected by Net_Worm.win32.sassor.be. > > These were: > > coreutils-6.7-1.tar.bzz > coreutils-6.7-2.tar.bzz (Those are 'bz2', not 'bzz') 3b05924e0a7cf598f4e3385f087c8e05 *coreutils-6.7-1.tar.bz2 9d029c804fa0a3ee0b595202c1811b73 *coreutils-6.7-2.tar.bz2 > and more specifically: > > coreutils-6.7-2//user/bin/gkill.exe / $ md5sum /usr/bin/gkill.exe 591d2307461778c28aac699603218291 */usr/bin/gkill.exe > I'll post a new thread on this. 100-1 it's a false positive. cheers, DaveK -- Can't think of a witty .sigline today.... -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/