X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:mime-version:from:date:message-id:subject:to :content-type; q=dns; s=default; b=l4tWLeZ4VpnxEJQypJ4K+aFGi3C4q C9t4dK2KEm6ylSk7jGDT6KN0q3ZLQ+O+zVC6/yeXelU+sIhcA9Fi2j1acEc7a0Bi qN1niuAt0E047VR/x0RYXlcLhr762KrvuaADbCiN3kWRf1nrC1q+B61NOq4nP6jV IXg0gEcnD8bMJE= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:mime-version:from:date:message-id:subject:to :content-type; s=default; bh=1jLYkwXejBZwws68WiFX81hduHk=; b=rxC cyXOPEhhR9BbVORX0zXJzGH096qcMMp/6bPA7BZFFrExmBtcKPcv5h4kL3kXgHpG 6nLJ2SLJ5hPdhZpowBm8Rcai2YIeelu1khXFBYPW+M/sr5nr9A1Q91l3Qw9x1RUI pznze+UP4ZMf9pSaHe7ZUqMsfIDmL6QeZ9OEUsw4= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=no version=3.3.2 spammy=india, India, H*F:D*in, sincerely X-HELO: mail-lf0-f47.google.com X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=FVXDBDqsCAI0NFkdcwcPtRhXQiITzHIgKG/EW6psnkY=; b=r6y1Lhm1u2SC12h9oQr3htmnHPbZX5ngFa/EMdl9xjvsfcE4+7TUEhhoDbOZHX6aO0 0ZNlJ1Z3culJsHI/zfphsxdNsOJnjv1xQ26DYOHSDak2Jv7jcl7Goz3P9kNDC7SakyY0 jMT35cRHvihzW9Vvu4vBF8I0jIKS1kGBMkVrPJu/FcaG168IocCnpKXV7KYZ0rZdVZ/x ncdI3ljRgB4pu3E65s+ApH7OTS6VGYgMH+WfH7XR7wyYETCKAJrtueME3aIWZNyDvj+Z iJK3JL5S38fuxTDvpNczoGbl7mHnSZ0Y9YpTmlk3li0dzAeBCZnzvxP43p1iBySPsesZ Cc8g== X-Gm-Message-State: AKS2vOxld16FkLORu1wP97+vPcOVoDhjcL3qUvWrfjoYnDjH3P4mdjQ4 uOBR90rT882taJouRLyHa1v++sArtIEdliM= X-Received: by 10.46.1.209 with SMTP id f78mr3484094lji.55.1498666025413; Wed, 28 Jun 2017 09:07:05 -0700 (PDT) MIME-Version: 1.0 From: Sagar Kapadia Date: Wed, 28 Jun 2017 21:37:04 +0530 Message-ID: Subject: XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission To: cygwin AT cygwin DOT com Content-Type: text/plain; charset="UTF-8" HI, I wish to report that Cygwin.XLaunch.exe is a Trojan and it allows remote control of a pc without the users knowledge or permission. I installed the cygwin package and the Xwindows server too. However, today, I found somebody controlling my pc remotely. I know because the mouse behaved erratically and then the XLanuch configuration screen came up. I tried to kill it using the Task Manager but it would restart. I had to reboot and turn off networking and then delete the cygwin folder. McAfee did not report this as a Trojan. I have written a mail to McAfee notifying them of this issue. I dont know if you are aware of this issue or not, but I found it serious enough to report. to summarize XLaunch allows remote control of a pc without the users knowledge or permission. Sincerely, Sagar R. Kapadia, India -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple