X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:reply-to:mime-version:content-type:content-transfer-encoding
	:in-reply-to; q=dns; s=default; b=epxvt065vhuN69c7RHLzaikaurzD3S
	djbX/EV0EpeE8WJWV1sNtIUnYGQbWa9n+FGzxFlDA+jc5BchsL57rLxdpAtoykcN
	zOjkDOpkpueVpOHoIRM+m+K5y2wv90Z04SBQie7EsywUXyxjObTL3lZd9fRznZCc
	Q0SjHz8GX1yB8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:reply-to:mime-version:content-type:content-transfer-encoding
	:in-reply-to; s=default; bh=kf6cHznutwW2oL23hlmpPagz6nM=; b=hmf7
	2gUzDDI5ggGYOFEyRdbA1s+PUOQj8LJ1sqz6qa/E5itQTmJDQTGMq0SzBDbfMnDF
	7iaCtGSdpE8V+ge3o7KV4bUvGGB+Dhs4rp9BRhsn1xBR/R7OWHm91g8f0Onzkwwi
	TZ5E1+NSBiPBFsJ8Oi4wHplz6ZthO1nmKLsANjI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=1.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2 spammy=reputable, H*UA:1.8.1.19, H*u:2.0.0.19, H*UA:2.0.0.19
X-HELO: blaine.gmane.org
To: cygwin AT cygwin DOT com
From: =?UTF-8?Q?Ren=c3=a9_Berber?= <rene DOT berber AT gmail DOT com>
Subject: Re: Malwarebytes flags qdbusviewer-qt5.exe as Adware.Elex malware
Date: Sun, 19 Mar 2017 14:23:32 -0600
Lines: 15
Message-ID: <oampff$mjd$1@blaine.gmane.org>
References: <1681128500 DOT 3158335 DOT 1489943990284 DOT ref AT mail DOT yahoo DOT com> <1681128500 DOT 3158335 DOT 1489943990284 AT mail DOT yahoo DOT com> <CAOYw7dsbNGK4HiwfjRw8ixx-cMzLKe7gWh_J+ff+Z371xzJ_xw AT mail DOT gmail DOT com> <723881701 DOT 3213900 DOT 1489947507261 AT mail DOT yahoo DOT com>
Reply-To: Do not reply <rene DOT berber AT gmail DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0
In-Reply-To: <723881701.3213900.1489947507261@mail.yahoo.com>
X-IsSubscribed: yes

On 3/19/2017 12:18 PM, Ed Koerber via cygwin wrote:

> It bears asking to be thorough... are we sure that the cygwin package
> has not been compromised somehow?

You are correct in not taking unsubstantiated remarks as useful.

We usually run the program in question through https://www.virustotal.com/

If several, reputable, scanners flag it as a virus, then its probably a
virus.

Hope this helps.
-- 
R. Berber


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple