X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=aP4X7eDnER1muoma
	ClXYJrq20WRXUT+BhkKeM7CfOZBba+LxEBmdUfHFLxPc1ZH2+Z03beJV62VM0I85
	zlnUOXSS3vJw99yh216s2VFi/OxBrrLK8KlRZVBMqo0NDB9cYAb2P/lEe1nrVbeW
	Og8UwbKjCLD/gFRGkQ5zXeRjz3c=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=eMWdUrUqRaQnxmf+pSdSvw
	Y6VDA=; b=Lcs/RDf8dgBK8JDVXV9TpTHzSKAxnRsPfrWhNLD+V/sobqJ+wT4/fo
	79MZaJUn9DpQbCunL/uCj+MgkvsAQ8lyFaNMIENjJ4HTcQEzugpGsKu5BoeEjdze
	7nft+EgoBtUnq2nMyBPrMnr5ReIANFKh3cwGiL1gM/qFwSbZcLF+8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=0.5 required=5.0 tests=BAYES_05,KAM_LAZY_DOMAIN_SECURITY,SPF_HELO_PASS autolearn=no version=3.3.2 spammy=H*M:cygwin, H*F:U*yselkowitz, utm_medium, utm_source
X-HELO: mx1.redhat.com
Subject: Re: AVG scan found WIN-HEUR virus in cygwin install from aarnet ftp
To: cygwin AT cygwin DOT com
References: <412824260 DOT 1534094 DOT 1458171873522 DOT JavaMail DOT yahoo DOT ref AT mail DOT yahoo DOT com> <412824260 DOT 1534094 DOT 1458171873522 DOT JavaMail DOT yahoo AT mail DOT yahoo DOT com>
From: Yaakov Selkowitz <yselkowitz AT cygwin DOT com>
Message-ID: <56EA3D3C.4000600@cygwin.com>
Date: Thu, 17 Mar 2016 00:14:36 -0500
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <412824260.1534094.1458171873522.JavaMail.yahoo@mail.yahoo.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

https://cygwin.com/acronyms/#PCYMTWLL !

On 2016-03-16 18:44, Justin S. wrote:
>    AVG anti-virus reported it found a virus in a Cygwin install pulled from aarnet on 8 Jan 2014.
>
> "";"Virus found Win32/Heur, C:\Users\justin\Desktop\ftp%3a%2f%2fmirror.aarnet.edu.au%2fpub%2fsourceware%2fcygwin%2f\x86\release\cygwin\cygwin-debuginfo\cygwin-debuginfo-1.7.27-2.tar.xz";"Secured"
>
> The AVG info on the reported virus is as follows:
>
> http://www.avgthreatlabs.com/au-en/virus-and-malware-information/info/win-heur/?name=Win32/Heur&utm_source=TDPU&utm_medium=SCAN&PRTYPE=AVF
>
> I think it has been lurking there for some time. You might want to check into it to make sure nothing has sneaked in.

https://cygwin.com/faq/faq.html#faq.setup.virus

-- 
Yaakov

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple