Message-ID: <48CF791C.1060801@sellers.com>
Date: Tue, 16 Sep 2008 02:15:08 -0700
From: John Sellers <jks_nospam AT sellers DOT com>
User-Agent: Thunderbird 2.0.0.16 (Windows/20080708)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Kaspersky reports WORM in Coreutils 6.7-1 and 6.7-2
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com

(I am VERY tired right now so any I typed here might have typos.)
Today I ran a scan with Kaspersky Internet Security 2009, and it 
reported that a couple of files in the install\cygwin directories were 
infected by Net_Worm.win32.sassor.be.

My system is WindowsXP Media edition

These were:

  
C:\install\cygwin\package\http%3a%2f%2fmirrors.kernel.org%2fsourceware%2fcygwin\release\coreutils\coreutils-6.7-1.tar.bz2 
C:\install\cygwin\package\http%3a%2f%2fmirrors.kernel.org%2fsourceware%2fcygwin\release\coreutils\coreutils-6.7-2.tar.bz2
 

and more specifically:

  coreutils-6.7-2//user/bin/gkill.exe

I know these are old releases so I am assuming everything is OK.  I 
deleted these to tar files and I assume that won't hurt my 
installation.  right?


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/