DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=aP4X7eDnER1muoma
	ClXYJrq20WRXUT+BhkKeM7CfOZBba+LxEBmdUfHFLxPc1ZH2+Z03beJV62VM0I85
	zlnUOXSS3vJw99yh216s2VFi/OxBrrLK8KlRZVBMqo0NDB9cYAb2P/lEe1nrVbeW
	Og8UwbKjCLD/gFRGkQ5zXeRjz3c=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Subject: Re: AVG scan found WIN-HEUR virus in cygwin install from aarnet ftp
To: cygwin@cygwin.com
References: <412824260.1534094.1458171873522.JavaMail.yahoo.ref@mail.yahoo.com> <412824260.1534094.1458171873522.JavaMail.yahoo@mail.yahoo.com>
From: Yaakov Selkowitz <yselkowitz@cygwin.com>
Message-ID: <56EA3D3C.4000600@cygwin.com>
Date: Thu, 17 Mar 2016 00:14:36 -0500
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <412824260.1534094.1458171873522.JavaMail.yahoo@mail.yahoo.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

https://cygwin.com/acronyms/#PCYMTWLL !

On 2016-03-16 18:44, Justin S. wrote:
>    AVG anti-virus reported it found a virus in a Cygwin install pulled from aarnet on 8 Jan 2014.
>
> "";"Virus found Win32/Heur, C:\Users\justin\Desktop\ftp%3a%2f%2fmirror.aarnet.edu.au%2fpub%2fsourceware%2fcygwin%2f\x86\release\cygwin\cygwin-debuginfo\cygwin-debuginfo-1.7.27-2.tar.xz";"Secured"
>
> The AVG info on the reported virus is as follows:
>
> http://www.avgthreatlabs.com/au-en/virus-and-malware-information/info/win-heur/?name=Win32/Heur&utm_source=TDPU&utm_medium=SCAN&PRTYPE=AVF
>
> I think it has been lurking there for some time. You might want to check into it to make sure nothing has sneaked in.

https://cygwin.com/faq/faq.html#faq.setup.virus

-- 
Yaakov

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple