Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <3C6EB47F.2080502@ece.gatech.edu>
Date: Sat, 16 Feb 2002 14:35:27 -0500
From: Charles Wilson <cwilson AT ece DOT gatech DOT edu>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
X-Accept-Language: en-us
MIME-Version: 1.0
To: Brian & Sara Feather <bfeather AT msn DOT com>
CC: cygwin AT cygwin DOT com
Subject: Re: backdoor.egghead trojan  in zlib-1.1.3.tar.gz
References: <002401c1b6fa$b0719ec0$010aa8c0 AT emachine>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Sigh.

False positive.

Reported 27 times already.  Multiple postings over the last three days. 
  Every single one was a FALSE positive.  Complain to symantec.

And next time, *you* check the archives.

--Chuck

P.S. When posting on an archived public mailing list, you probably don't 
want to include your home phone number.  Talk about bad ideas...

Brian & Sara Feather wrote:

> Hello,
> 
> I've got some BAD news. Norton just found a copy of backdoor.egghead in 
> latest/zlib/zlib-1.1.3.tar.gz of the installation files for Cygwin that 
> I downloaded last month (January 10). Norton also found the trojan in 
> d:\cygwin\bin\cygz.dll and in c:\windows\temp\usr_bin_cygz.dll (twice at 
> different times). It is also in several A00*.CPY files in 
> c:\_RESTORE\TEMP. I have Windows ME 4.90.3000 . I have attached a copy 
> of "cygcheck -s -v -r > cygcheck.out". I will deal with the virus 
> problem. I don't think it can fully activate on Windows ME. My biggest 
> concern are the several WIN2000 machines at work that may now be 
> infected (shake, tremble, fear).
> 
> Please check your archives I have also included the setup.log from the 
> original download.



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/