DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 865E53858D35
MIME-Version: 1.0
References: <CAOJ3qEu9Y5CQu4ArKmZATc0Od9+yJyU6Zn1iF+Ywc-koJcQQGg@mail.gmail.com>
In-Reply-To: <CAOJ3qEu9Y5CQu4ArKmZATc0Od9+yJyU6Zn1iF+Ywc-koJcQQGg@mail.gmail.com>
Date: Thu, 25 Nov 2021 21:08:07 +0100
Message-ID: <CAEhDDbCa1L3wj5Rg54WvWYrhBBNvZaVX2vvCXQ=2o+cbEO3RUw@mail.gmail.com>
Subject: Re: Bitdefender detecting a file from cygwin as a trojan
To: Tyme LaDow <tynotanime@gmail.com>
From: Csaba Raduly via Cygwin <cygwin@cygwin.com>
Reply-To: Csaba Raduly <rcsaba@gmail.com>
Cc: cygwin list <cygwin@cygwin.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>

Hi,

On Thu, 25 Nov 2021 at 20:33, Tyme LaDow via Cygwin  wrote:
>
> Hey,
>
> I'm running Windows 10 Pro v. 10.0.19042 build 19042 and I installed cygwin
> at least a year ago and haven't touched it since June 2020.  Today,
> November 25th, 2021, I got a notification from Bitdefender that it had
> detected a trojan and quarantined it.  The threat notification says "Item
> was blocked. Threat name: Trojan.GenericKDZ.80660. Path:
> C:\cygwin64\bin\dumper.exe."

That is almost certainly a false positive. Restore the file, and
submit it to virustotal.com
if you want to be safe.

Perhaps you could try upgrading too.

Csaba
-- 
You can get very substantial performance improvements
by not doing the right thing. - Scott Meyers, An Effective C++11/14 Sampler
So if you're looking for a completely portable, 100% standards-conformant way
to get the wrong information: this is what you want. - Scott Meyers (C++TDaWYK)

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple