Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Thu, 2 May 2002 12:01:35 -0700 (Pacific Daylight Time)
From: Michael A Chase <mchase AT ix DOT netcom DOT com>
Subject:  Re: Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe
To: Winston Gutkowski <winston DOT gutkowski AT eztext DOT com>,
   Cygwin <cygwin AT cygwin DOT com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-Disposition: INLINE
References:  <EBEMJMPFEOOPGHBJFKGPKELICJAA DOT winston DOT gutkowski AT eztext DOT com>
In-Reply-To:  <EBEMJMPFEOOPGHBJFKGPKELICJAA.winston.gutkowski@eztext.com>
Reply-To: Michael A Chase <mchase AT ix DOT netcom DOT com>
Message-Id: <E173Lpm-00059c-00@smtp10.atl.mindspring.net>

On Thu, 2 May 2002 11:04:06 -0700 Winston Gutkowski <winston DOT gutkowski AT eztext DOT com> wrote:

> Can anyone confirm or deny this? Both products mentioned are reputable virus
> checkers, so it would be nice to get some official feedback on the situation.

To date, every alarm about setup.exe has been either an invalid test by the
anti-virus software or a virus infection spread by some other means.  Send
your 'infected' copy to your anti-virus vendor if you want official
feedback __just as Elmar suggested__.

Just to be certain, I confirmed my Norton Anti-Virus is completely up to
date, downloaded a fresh copy of setup.exe, and scanned it.  It was clean. 
The way setup.exe is created and distributed makes infection at Redhat
(cygwin.com) or one of the mirrors unlikely.

Since Klez is normally spread by people opening email attachments, you
should check if you have all received similar emails recently.  A full
system virus scan would be prudent on all potentially affected systems.

> > -----Original Message-----
> > From: cygwin-owner AT cygwin DOT com [mailto:cygwin-owner AT cygwin DOT com]On Behalf
> > Of Elmar Haneke
> > Sent: Thursday, May 02, 2002 7:36
> > To: cygwin AT cygwin DOT com
> > Subject: Re: Not to alarm anyone - but possible virus on
> > http://cygwin.com/setup.exe

> > Gianni Mariani schrieb::
> >
> > > I have some reasons to suspect that http://cygwin.com/setup.exe is
> > > infected with a virus that Norton and McAfree don't scan. well,
> > > sometimes they say it's Cles or Wez or somthing.
> > > This is the md5 of the setup.exe I downloaded.
> > >
> > > 616c0f35c0abf14d00a82a7bea1f1b2c  setup.exe
> > >
> > > I really hope this is a false alarm but it's too coincidental to not
> > > bring to some-one's attention.
> >
> > I did download the same file, f-prot an AntiVir did not find anything
> > suspect. You should send the file the the vendors of yor AV-Software,
> > the should fix their scan-engine.

-- 
Mac :})
** I normally forward private questions to the appropriate mail list. **
Ask Smarter: http://www.tuxedo.org/~esr/faqs/smart-questions.html
Give a hobbit a fish and he eats fish for a day.
Give a hobbit a ring and he eats fish for an age.



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/