Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Remote-IP: 213.191.128.12
X-Remote-IP: 213.191.130.91
Message-ID: <4125476A.7050802@inet.hr>
Date: Fri, 20 Aug 2004 00:35:54 +0000
From: Miroslav Rovis <m DOT rovis AT inet DOT hr>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040406
MIME-Version: 1.0
To: Robert McNulty Junior <unclebobby1 AT bellsouth DOT net>, cygwin AT cygwin DOT com
Subject: Re: cygglut-3.dll: W32.Magistr.B FOUND
References: <41215076 DOT 7010702 AT inet DOT hr> <41217648 DOT 8010505 AT isonews2 DOT com> <4122AD11 DOT 8070500 AT inet DOT hr> <412291A1 DOT 3040707 AT bellsouth DOT net>
In-Reply-To: <412291A1.3040707@bellsouth.net>
X-Enigmail-Version: 0.83.6.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Note-from-DJ: This may be spam

Robert McNulty Junior wrote:
> 
> 
> Miroslav Rovis wrote:
> 
>> Arturus Magi wrote:
>>
>>> Miroslav Rovis wrote:
>>>
>>>> Yesterday we ran setup.exe and downloaded X-Cygwin.
>>>> Followed direction in the FAQ about virus unlikely to be there.
>>>> But this package, from at least three different mirrors shows up the 
>>>> same with clamav:
>>>>
>>>> freeglut-2.2.0-1.tar.bz2
>>>>
>>>> (honestly we don't know at this time what the package is about, late 
>>>> at night here, spent all day, particularly myself, mostly with 
>>>> getting to know clamav, sleepy...)
>>>> Upon unpacking it and running:
>>>>
>>>> [root AT lfsMs7 /aA/CygWin/ftp.uni-kl.de]# clamscan -r usr/x11r6/
>>>> usr/x11r6//bin/cygglut-3.dll: W32.Magistr.B FOUND
>>>> usr/x11r6//include/gl/freeglut.h: OK
>>>> ... (the rest is all OK)
>>>> ----------- SCAN SUMMARY -----------
>>>> Known viruses: 23433
>>>> Scanned directories: 9
>>>> Scanned files: 24
>>>> Infected files: 1
>>>> Data scanned: 0.67 MB
>>>> I/O buffer size: 131072 bytes
>>>> Time: 1.211 sec (0 m 1 s)
>>>> [root AT lfsMs7 /aA/CygWin/ftp.uni-kl.de]#
>>>>
>>>
>>> Clamscan, updated via freshclam just prior scanning for this post 
>>> shows no virus in /usr/x11r6/cygglut-3.dll here.  The mirror I 
>>> downloaded from is ftp://ftp.sunsite.utk.edu/pub/cygwin
>>>
>>>
>>>
>>> ----------- SCAN SUMMARY -----------
>>> Known viruses: 23431
>>> Scanned directories: 325
>>> Scanned files: 12637
>>> Infected files: 0
>>> Data scanned: 227.41 MB
>>> I/O buffer size: 131072 bytes
>>> Time: 1186.872 sec (19 m 46 s)
>>>
>>>
>>>
>> I'm taking your word and the other guy's that reported Norton found that
>> package OK, as I can't update my cvs checkout, this:
>> http://sourceforge.net/docman/display_doc.php?docid=2352&group_id=1
>> unfortunately "works" for me...
>> Miroslav Rovis
>>
>>
>> -- 
>> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>> Problem reports:       http://cygwin.com/problems.html
>> Documentation:         http://cygwin.com/docs.html
>> FAQ:                   http://cygwin.com/faq/
>>
> The virus is at your end.
> I have Norton too. No virus here.
> 
> 
If you read the previous mail on this subject, can you tell me how can
the same
package in question on all three or four mirrors I tried (and I assume
others would show
the same) be really infected, only on my machine?
I have no other Cygwin files whatsoever infected but that package
(freeglut-xxx)...
And did you see those pages, and did you get what they meant, on clamav
(see my previous mails)?
Clamav *had* false positives of this virus.
But surely, thanks for you care!
Miro



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/