DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:reply-to:mime-version:content-type:content-transfer-encoding
	:in-reply-to; q=dns; s=default; b=fBmuPWAqD+wswKt729d5HGJwxY6xD7
	4YCLrm9SPdwtMMhil/CI7V4yYUtdbO65kbrrRUK/0ds8SvfRoUVMbIS+uYPYeLTL
	+S9PaiW+Lnxqo8vrYUUJQKBhSthvCOl6idRr3MwPDNOCDgl5aFf0IQWIZat9knUm
	XuJlg1ZpM4u8U=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
To: cygwin@cygwin.com
From: =?UTF-8?Q?Ren=c3=a9_Berber?= <rene.berber@gmail.com>
Subject: Re: Malwarebytes flags qdbusviewer-qt5.exe as Adware.Elex malware
Date: Sun, 19 Mar 2017 18:05:41 -0600
Lines: 26
Message-ID: <oan6g1$fvu$1@blaine.gmane.org>
References: <1681128500.3158335.1489943990284.ref@mail.yahoo.com> <1681128500.3158335.1489943990284@mail.yahoo.com> <CAOYw7dsbNGK4HiwfjRw8ixx-cMzLKe7gWh_J+ff+Z371xzJ_xw@mail.gmail.com> <723881701.3213900.1489947507261@mail.yahoo.com> <oampff$mjd$1@blaine.gmane.org>
Reply-To: Do not reply <rene.berber@gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0
In-Reply-To: <oampff$mjd$1@blaine.gmane.org>

Back to the list, and keep it there.

-------- Forwarded Message --------
From: 	Chris Johnson
To: 	Do not reply

I'm probably going to catch hell for this.

Don't virus scanners in general get caught by other virus scanner
because their databases have the same signatures as the viruses they
look for?  I don't know how to get around this other than an exclusion
list.

> On 3/19/2017 12:18 PM, Ed Koerber via cygwin wrote:
>
>> It bears asking to be thorough... are we sure that the cygwin package
>> has not been compromised somehow?
> You are correct in not taking unsubstantiated remarks as useful.
>
> We usually run the program in question through https://www.virustotal.com/
>
> If several, reputable, scanners flag it as a virus, then its probably a
> virus.
>
> Hope this helps.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple