X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=l4tWLeZ4VpnxEJQypJ4K+aFGi3C4q
	C9t4dK2KEm6ylSk7jGDT6KN0q3ZLQ+O+zVC6/yeXelU+sIhcA9Fi2j1acEc7a0Bi
	qN1niuAt0E047VR/x0RYXlcLhr762KrvuaADbCiN3kWRf1nrC1q+B61NOq4nP6jV
	IXg0gEcnD8bMJE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; s=default; bh=1jLYkwXejBZwws68WiFX81hduHk=; b=rxC
	cyXOPEhhR9BbVORX0zXJzGH096qcMMp/6bPA7BZFFrExmBtcKPcv5h4kL3kXgHpG
	6nLJ2SLJ5hPdhZpowBm8Rcai2YIeelu1khXFBYPW+M/sr5nr9A1Q91l3Qw9x1RUI
	pznze+UP4ZMf9pSaHe7ZUqMsfIDmL6QeZ9OEUsw4=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=no version=3.3.2 spammy=india, India, H*F:D*in, sincerely
X-HELO: mail-lf0-f47.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20161025;        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;        bh=FVXDBDqsCAI0NFkdcwcPtRhXQiITzHIgKG/EW6psnkY=;        b=r6y1Lhm1u2SC12h9oQr3htmnHPbZX5ngFa/EMdl9xjvsfcE4+7TUEhhoDbOZHX6aO0         0ZNlJ1Z3culJsHI/zfphsxdNsOJnjv1xQ26DYOHSDak2Jv7jcl7Goz3P9kNDC7SakyY0         jMT35cRHvihzW9Vvu4vBF8I0jIKS1kGBMkVrPJu/FcaG168IocCnpKXV7KYZ0rZdVZ/x         ncdI3ljRgB4pu3E65s+ApH7OTS6VGYgMH+WfH7XR7wyYETCKAJrtueME3aIWZNyDvj+Z         iJK3JL5S38fuxTDvpNczoGbl7mHnSZ0Y9YpTmlk3li0dzAeBCZnzvxP43p1iBySPsesZ         Cc8g==
X-Gm-Message-State: AKS2vOxld16FkLORu1wP97+vPcOVoDhjcL3qUvWrfjoYnDjH3P4mdjQ4	uOBR90rT882taJouRLyHa1v++sArtIEdliM=
X-Received: by 10.46.1.209 with SMTP id f78mr3484094lji.55.1498666025413; Wed, 28 Jun 2017 09:07:05 -0700 (PDT)
MIME-Version: 1.0
From: Sagar Kapadia <sagar@cloudnineconsulting.in>
Date: Wed, 28 Jun 2017 21:37:04 +0530
Message-ID: <CAPXRkNEx44KFypaqj+hjrF+r8Es-xSmBTCcT2PED7XSrAchGNw@mail.gmail.com>
Subject: XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission
To: cygwin@cygwin.com
Content-Type: text/plain; charset="UTF-8"

HI,
I wish to report that Cygwin.XLaunch.exe is a Trojan and it allows
remote control of a pc without the users knowledge or permission. I
installed the cygwin package and the Xwindows server too. However,
today, I found somebody controlling my pc remotely. I know because the
mouse behaved erratically and then the XLanuch configuration screen
came up. I tried to kill it using the Task Manager but it would
restart. I had to reboot and turn off networking and then delete the
cygwin folder.

McAfee did not report this as a Trojan. I have written a mail to
McAfee notifying them of this issue.

I dont know if you are aware of this issue or not, but I found it
serious enough to report.

to summarize
XLaunch allows remote control of a pc without the users knowledge or permission.
Sincerely,
Sagar R. Kapadia,
India

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

