X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.7 required=5.0	tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,TW_YG,T_TO_NO_BRKTS_FREEMAIL
X-Spam-Check-By: sourceware.org
Message-ID: <4C0BBD49.3080508@gmail.com>
Date: Sun, 06 Jun 2010 16:22:49 +0100
From: Dave Korn <dave DOT korn DOT cygwin AT gmail DOT com>
User-Agent: Thunderbird 2.0.0.17 (Windows/20080914)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: 1.7.5: problem running cygwin in Windows XP
References: <AANLkTil_GWaFr2-hUjmzhd8QiIg4AWvTimLKVqsBOEPH AT mail DOT gmail DOT com>	<AANLkTilHABnAA0c2DvunrKIR0jsBnznKvQDoDnyDUAXu AT mail DOT gmail DOT com> <AANLkTil3UmjGNB1MNopMzjFB0DycUAMPqVVwQ_iWU5qT AT mail DOT gmail DOT com>
In-Reply-To: <AANLkTil3UmjGNB1MNopMzjFB0DycUAMPqVVwQ_iWU5qT@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 06/06/2010 06:04, Ramakishore Yelamanchilli wrote:
> I installed cygwin and getting the following error running any
> command. Please find the attached file with cygcheck output.

  You are infected by a fake-antivirus malware:

> AVAPP = 'C:\Program Files\PersonalAV'
> AVUNINST = 'C:\Program Files\Common Files\Uninstall\PersonalAV\Uninstall.lnk'

  You need to disinfect your system; I googled some instructions and found

http://www.geekpolice.net/malware-removal-guides-f12/how-to-remove-personalav-removal-guide-t11001.htm

  After your system is clean, maybe the cygwin installation will start
working, or maybe it might need re-installing through setup.exe; it's hard to
tell how much the malware interfered with your installation.

> DEFLOGDIR = 'C:\Documents and Settings\All Users\Application Data\McAfee\DesktopProtection'

  That's a real anti-virus, but McAfee products have been known to interfere
with cygwin in the past, in a way very much like what you're seeing: fork
failure messages.  If cleaning the malware off your system doesn't fix
everything, the next thing to try would be disabling any advanced heuristic or
behaviour blocking features it has, or perhaps creating an exception for the
on-access file scanner to exclude anything in the cygwin directories.  See

http://cygwin.com/faq/faq.using.html#faq.using.bloda

for more details about that potential issue.

    cheers,
      DaveK



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple