X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:reply-to:mime-version:content-type:content-transfer-encoding
	:in-reply-to; q=dns; s=default; b=fBmuPWAqD+wswKt729d5HGJwxY6xD7
	4YCLrm9SPdwtMMhil/CI7V4yYUtdbO65kbrrRUK/0ds8SvfRoUVMbIS+uYPYeLTL
	+S9PaiW+Lnxqo8vrYUUJQKBhSthvCOl6idRr3MwPDNOCDgl5aFf0IQWIZat9knUm
	XuJlg1ZpM4u8U=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:reply-to:mime-version:content-type:content-transfer-encoding
	:in-reply-to; s=default; bh=aacOIHrlgJxdAsZG2btUcSbJbpw=; b=muGS
	GP+INRXl7CGq1Bf/SHByOaR4Lw2pYPOIC+xvcs7cfrMyxjTHvzJvnUkV0iZoMvBo
	u0JpgbUTpwYi+XKEps4IKeJz1bNilV8eD3vrCXutaHZA8Qvs5sgNMsZ/wn1GD71y
	t+Vl/+kW7iqZB+5Dl4xsOusIIKcZ2dqxVZ9GLzk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-3.2 required=5.0 tests=BAYES_50,FREEMAIL_FROM,GIT_PATCH_2,KAM_LAZY_DOMAIN_SECURITY autolearn=ham version=3.3.2 spammy=hell, exclusion, H*UA:en-US, H*u:en-US
X-HELO: blaine.gmane.org
To: cygwin AT cygwin DOT com
From: =?UTF-8?Q?Ren=c3=a9_Berber?= <rene DOT berber AT gmail DOT com>
Subject: Re: Malwarebytes flags qdbusviewer-qt5.exe as Adware.Elex malware
Date: Sun, 19 Mar 2017 18:05:41 -0600
Lines: 26
Message-ID: <oan6g1$fvu$1@blaine.gmane.org>
References: <1681128500 DOT 3158335 DOT 1489943990284 DOT ref AT mail DOT yahoo DOT com> <1681128500 DOT 3158335 DOT 1489943990284 AT mail DOT yahoo DOT com> <CAOYw7dsbNGK4HiwfjRw8ixx-cMzLKe7gWh_J+ff+Z371xzJ_xw AT mail DOT gmail DOT com> <723881701 DOT 3213900 DOT 1489947507261 AT mail DOT yahoo DOT com> <oampff$mjd$1 AT blaine DOT gmane DOT org>
Reply-To: Do not reply <rene DOT berber AT gmail DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0
In-Reply-To: <oampff$mjd$1@blaine.gmane.org>
X-IsSubscribed: yes

Back to the list, and keep it there.

-------- Forwarded Message --------
From: 	Chris Johnson
To: 	Do not reply

I'm probably going to catch hell for this.

Don't virus scanners in general get caught by other virus scanner
because their databases have the same signatures as the viruses they
look for?  I don't know how to get around this other than an exclusion
list.

> On 3/19/2017 12:18 PM, Ed Koerber via cygwin wrote:
>
>> It bears asking to be thorough... are we sure that the cygwin package
>> has not been compromised somehow?
> You are correct in not taking unsubstantiated remarks as useful.
>
> We usually run the program in question through https://www.virustotal.com/
>
> If several, reputable, scanners flag it as a virus, then its probably a
> virus.
>
> Hope this helps.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple