X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=bL8cfBh
	OzMBevW/qgK7vnskae/XEMoe8JK6PzvNRUGdMbssHoFWSualZ0TAKR2S0mS4ENcp
	LjedGhsfHyR+Fd+5SOS/EcZzGzM1Jf8Uu4Va1o1EsCHRVUyNugnepzs5axxgsbpc
	GfqK9+HgXpUWmZaPifLzsabzhAvbSsI45ugA=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; s=default; bh=H/463i/4NKJKu
	6MFx6NpXrvf+dM=; b=y0pClhtD0c+eumgeWdfbfpIF+j94g2h1SbVOrs5OAvTPE
	B8ERMTa8kcJ9Amyd2+zq9q1I+gDq+JZCesXxWb+wxoKXRYKmv7Qrnfctdvi7koPc
	HzPETWbJkyKGkz9Y+uHw9MZycXLhSOWqQUtYWLKIr5OQWVEy+nVpR3CfKoB9xc=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=3.0 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.2 spammy=threats, 30pm, H*c:alternative, 2.883
X-HELO: mail-oi0-f46.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20161025;        h=x-gm-message-state:mime-version:in-reply-to:references:from:date         :message-id:subject:to;        bh=gHnu/HZu1RyiJdflOHO5g3DWAm/T7trhRAHuHnop2Ig=;        b=CuLh8RVfRa8diL8W/Aoa/BY9YZt/3jXXIJFxXnCx8e50w0fYKcq7m5LvJZLD7Zb0XD         eHRGC7UvO2Y8QTlwvL1POBtnYVkJUUhk/LwFMgr22txI0If081yCe/qyMMsgptCgB3Kv         2KLros6Cf0gGaIm/1K9PHS2QjZRk8jPExbJehZZMs/fUn3GCZgYxOdzI/YHk2Uev0vL/         e73ZyD5caSx78Pf+Yt19ufafaTm4FVCaoEXyCSS92yq2QgyXkTWmVa4dPHMq/FLv8e13         ZWa2A3lJOvQ6+/70ijcyN+5qtgEOrUU+z17NW/NxhQG8U9nFLbkn7WfY+j5548vUF3cm         ezWA==
X-Gm-Message-State: AKGB3mJrLV+uFF1sT9AJCam9zrz3BLOIqijaKDsILBikvsYlH20MSHs6	1a+RooNdxft02aWW7+sfZV2SDaLWuqfxH7DWSbY=
X-Google-Smtp-Source: ACJfBovPPlwb/4SqjjHXaR3R8NyxZQuF6nNW4RFFMGxnOc+WWBZ8CtwM63XhmMDBo3iFzxbZr+t6T8nLOSCC5MUUX0M=
X-Received: by 10.202.59.139 with SMTP id i133mr6077024oia.211.1513808542113; Wed, 20 Dec 2017 14:22:22 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <1027529357.2141466.1513806966642@mail.yahoo.com>
References: <CAPGnsNZkLFaZYDUU-Ji6vDL1_LwzZBQ6QkQQg_UTvwn3pc9b=Q AT mail DOT gmail DOT com> <CANnN+=u9O+zvWyYhG1fH9C3UVRZijRoRWtigLOUiyunLUXdhoA AT mail DOT gmail DOT com> <1027529357 DOT 2141466 DOT 1513806966642 AT mail DOT yahoo DOT com>
From: Greg Taylor <greg DOT k DOT taylor AT gmail DOT com>
Date: Wed, 20 Dec 2017 14:22:21 -0800
Message-ID: <CAPGnsNaGqSkeZfpQnCVcov4tTJgF9kZfOBSCiGadx-xJZ=hxVg@mail.gmail.com>
Subject: Re: Norton antivirus detects a threat in setup-x86_64.exe
To: Vijaya Subramanian <vijaya612 AT yahoo DOT com>, cygwin AT cygwin DOT com
Content-Type: text/plain; charset="UTF-8"
X-IsSubscribed: yes

I downloaded the file setup-x86_64.exe again and now the scan reports no
threats.

Version 2.882 was all clear
Version 2.883 downloaded at 12:30pm reported a threat
Version 2.883 downloaded at 2:14pm PST was all clear

I looked in the logs and there was a WS.Reputation.1 risk which is
essentially a crowd sourced threat level.

The following URL explains this type of warning:
https://community.norton.com/en/forums/clarification-wsreputation1-detection



On Wed, Dec 20, 2017 at 1:56 PM, Vijaya Subramanian via cygwin <
cygwin AT cygwin DOT com> wrote:

> Just tell Norton you trust the application-it will say too few users but
> also give you the option to say you trust the app.
>
>
>     On Wednesday, December 20, 2017, 2:44:33 PM MST, Sean Murphy <
> s DOT pat DOT murph AT gmail DOT com> wrote:
>
>  On Wed, Dec 20, 2017 at 3:38 PM, Greg Taylor <greg DOT k DOT taylor AT gmail DOT com>
> wrote:
> > On 12/20/17 @ 12;20pm PST I downloaded the most recent version of
> > setup-x86_64.exe which was flagged as a threat by Norton Antivirus.
>
> It means Norton's heuristics jump the gun about Cygwin's setup.  I
> encountered this quite a few times in the past before I stopped using
> Norton.
>
> You have to go into Norton's settings and whitelist it as a trusted
> application.
>
> --
> Problem reports:      http://cygwin.com/problems.html
> FAQ:                  http://cygwin.com/faq/
> Documentation:        http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple