X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:mime-version:in-reply-to:references:from:date :message-id:subject:to:content-type; q=dns; s=default; b=CPHl2n9 GONN9JrsGtmfspnYp1EifAlh8uBfupNKijn/sVY9yju7KR4xKfUxzXUWwizyFHFc uaY9CGnUXUQgk52aSrIFP5TUrGbxcDW2IkwU+VSTGEbOiXUyLmMAEbFfs6jLtl9q JREtVhoMVcv80/oG8YAMqJw5JnXTNM8mHTRI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:mime-version:in-reply-to:references:from:date :message-id:subject:to:content-type; s=default; bh=/K9CjOa9UEm6+ OqYFM3/jOumVgo=; b=Ybqk4vcZlNy+LmQRRXBiwRpm7VZ9449vtli4k8Ic2Srpo yukCDF7zF516bfutd9q5FJOZI2MHdMBRUSQsAXqWMyunseVGc8yxi1VKNUbxu5rz jWsOaAhfueih63D3PSpqZh+TmnEaqr4prICyvMrPj+DBSuyo/HDiFgS9sZkybI= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 X-HELO: mail-qg0-f41.google.com X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:content-type; bh=ZbuhfLhlXMxfZcNY7PPL7jiqLfutmGjtXxNm6CH7kL4=; b=at1mirvDb4rTHlFTr/LRmQlczyIo/oKlLoq+mKJwp00Z8o3NX4UDN2HvvO6MYjufJd r6Cd/btGjRawZML4bv/f1agheHyFpFo93n0gzjjZ5ciQmyiErLe8KHmxxtZThblSbJzh qT4pIHMdx/QXYhUCcK6+NflcAIaHP4NEnnzHicf8TDf7BesGfBdTzrt7HpObxqdhue80 1J7JD0fIxKq0ewmU7xi24qYd6PPYsZjNE0I7hFkercAmZK61t33G4HUT1S2Ov3pNxGzB 1D6U8VJu4pI/0o+/J7HivVfjLYQSyZpvuJXel68gsE6J+849Enued3+N52DhugS05Vl0 n6XQ== X-Gm-Message-State: ALoCoQlcq7jJxnMoP3XDaUND2TUKxkCl/cg835KLi4NZTMiuHrGflx+CFahamW2RRglPl1V9Xo15 X-Received: by 10.140.26.179 with SMTP id 48mr6635757qgv.51.1400186831579; Thu, 15 May 2014 13:47:11 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <20140515194537.GB1733@ednor.casa.cgf.cx> References: <1400181948 DOT 68721 DOT YahooMailNeo AT web121901 DOT mail DOT ne1 DOT yahoo DOT com> <20140515193629 DOT GA18612 AT tastycake DOT net> <20140515194537 DOT GB1733 AT ednor DOT casa DOT cgf DOT cx> From: Robert Pendell Date: Thu, 15 May 2014 16:46:41 -0400 Message-ID: Subject: Re: setup-x86.exe has virus and is blocked by Malware Detectors To: cygwin AT cygwin DOT com Content-Type: text/plain; charset=UTF-8 X-IsSubscribed: yes On Thu, May 15, 2014 at 3:45 PM, Christopher Faylor wrote: > On Thu, May 15, 2014 at 08:36:29PM +0100, Adam Dinwoodie wrote: >>On Thu, May 15, 2014 at 12:25:48PM -0700, Wes Kaefer wrote: >>> I agree, it probably does not have a virus; but it has a virus signature. >> >>This is covered in the FAQ at http://cygwin.com/faq.html#faq.setup.virus > > Thanks for pointing that out. I should have remembered the FAQ. > > cgf > It is actually flagging the fact that setup.exe is packed using upx since at one point (or maybe still) virus authors had packed their binaries with upx in order to try to evade scanners. Upx in itself though is not a virus and the false flag should probably be removed by the antivirus company. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple