Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
Sender: cygwin-owner AT sourceware DOT cygnus DOT com
Delivered-To: mailing list cygwin AT sourceware DOT cygnus DOT com
Message-ID: <275399FB18C4D111871300805FBEB72F04D4344A@corpmx6.ess.harris.com>
From: "Brown, Philip" <pbrown01 AT harris DOT com>
To: djten AT sisna DOT com, cygwin AT sourceware DOT cygnus DOT com, dj AT delorie DOT com
Subject: Re: VIRUS DETECTION
Date: Wed, 14 Apr 1999 09:21:26 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2448.0)
Content-Type: text/plain

Reference:  <8EEF5657FE89D111A5D50000F81F9C8CB64409 AT rhnt02 DOT res DOT timken DOT com>
http://sourceware.cygnus.com/ml/cygwin/1999-04/msg00054.html

> When trying to download user.exe from ftp site, my virus scan software
> discovered the NETBUSPRO.DR virus in the file. Please let me know when this
> is fixed. I am an unix admin with a laptop running NT who has uses earlier
> releases of the software.

>I just scanned both user.exe and full.exe from both go.cygnus.com and
>sourceware.cygnus.com this morning, and found no viruses.  I used
>McAfee 4.0.2 with virus file 4.0.4019 (3/29).  Are you using the
>latest scanner and virus file?

I am using McAfee Virus Scan for Windows NT, Version 3.0.3 with virus file
3.0.3204 (3/27/99).
This is the latest virus file for the series 3 McAfee.  It is reporting the
NETBUSPRO.DR virus
on full.exe and user.exe.  The McAfee site does not contain documentation on the
NETBUSPRO
virus itself, but does list what appears to be a related NETBUS virus.
According to the site, this
virus is similar to the old "Back Orifice" virus in that it causes a program to
be run in background
which allows a user to remotely log onto your machine if they have the proper
virus signon.

Philip Brown
Sr. Principal Engineer
Harris Corporation
Aerospace Systems Division

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com