X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; q=dns; s=default; b=HKFmY
	ISJDBD5ck6hXNwoHW54AEUZr7nZWJn8ZygjrbR9zUwnpOQHlWrRUkJpWWQh5mxNd
	KZI0wmvoq1B65akXff6N0aTxbINjsz7+q+SrVTmYcnJpaIzCHe7jpFpTKQTVBx5L
	lxLNCQYlGWMoiVCuB+agNDHSvf2i+1TMk8OU3o=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; s=default; bh=CXmNY/8Fo1D
	kghFPp76D9/nbSvQ=; b=V2EbX+tjI8ICLSg78C8XOxRK2lz7IeC/RJKHQIgxq3E
	A30hs7x7+AlOmaajTG36IsEA9d009cqsPh6rTnnwuivt0TSJctXukbDKeJXzaggr
	cWAW63Xke+NamdkHB30aIsTLSM/318qCaaVPIdqzeb4Tk7yFEVJC3CIt37Bqk99I
	=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-2.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.1 spammy=virus, antivirus, helped, gathered
X-HELO: vsmx012.vodafonemail.xion.oxcs.net
From: Achim Gratz <Stromeko@nexgo.de>
To: cygwin@cygwin.com
Subject: Re: Sophos Antivirus
References: <8675fd88-d4a9-d022-885f-f03fa2082390@cs.umass.edu>
Date: Tue, 09 Apr 2019 18:38:45 +0200
In-Reply-To: <8675fd88-d4a9-d022-885f-f03fa2082390@cs.umass.edu> (Eliot Moss's	message of "Mon, 8 Apr 2019 18:06:22 -0400")
Message-ID: <87h8b7jfqi.fsf@Rainer.invalid>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain

Eliot Moss writes:
> At present, Sophos is enterprise managed on my computer, which means
> I can't even personally install the hotfix, but I might convince my
> organization to help me do it, etc.  Just gathered information while
> I await their response ...

No experience with Sophos, but certain heuristics in virus scanners
apparently are only applied when the file in question has not yet been
scanned.  So it is sometimes helpful to run an explicit scan of the
install dir.

With other antivirus solutions only explicit whitelisting or exclusion
of the installation directory actually helped.  The exclusion usually
only needs to target the "real-time" and heuristic engines of the
antivirus package, which might make it more acceptable for corporate IT
security.  It is also helpful to ask them to escalate to the vendor
support, since usually the vendors know about how their products
interact with Cygwin and have a solution ready for when the customer
asks.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Samples for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldSamplesExtra

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

