DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:cc
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=S8ZYDbLFgWcaPSn2
	mWI4Xwl13C7i8eeNd3HnVA0Apa0RmTCjw5HAfgM2SsTFg7wnnSOqDLbOolwGwJT9
	hAti+8ikMoCYZeio1fpOjjFc0geIncVuVXK5J7SfanbD4cLrFAukNECyifbCO2zJ
	g1GnAL/JHUq+oyElmy8yv32Z260=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <54676071.8090806@tiscali.co.uk>
Date: Sat, 15 Nov 2014 14:17:21 +0000
From: David Stacey <drstacey AT tiscali DOT co DOT uk>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
CC: david DOT vantyghem AT free DOT fr
Subject: Re: Virus in cpio.exe ?
References: <5467512C DOT 5090501 AT free DOT fr>
In-Reply-To: <5467512C.5090501@free.fr>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

On 15/11/14 13:12, David VANTYGHEM wrote:
> virustotal.com found several suspicious files in Cygwin : 
> https://github.com/alexkasko/openjdk-unofficial-builds/issues/20#issuecomment-62910085 
>
> I downloaded the original on Cygwin website and found the same virus 
> in cpio.exe (not in the 2 others files and I didn't find ln.exe in 
> Cygwin) :
> https://www.virustotal.com/fr/file/6ec8ec41fac40988330badf7f4ada72948657bf06fb71cf76ef7eb2bc0c5b3bf/analysis/ 
>

Thank you for reporting this, but it is highly likely that these are 
false positives:
https://cygwin.com/faq.html#faq.setup.virus

Please could you report these as false positives to the anti-virus company.

Dave.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple