X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; q=dns; s=default; b=HKFmY
	ISJDBD5ck6hXNwoHW54AEUZr7nZWJn8ZygjrbR9zUwnpOQHlWrRUkJpWWQh5mxNd
	KZI0wmvoq1B65akXff6N0aTxbINjsz7+q+SrVTmYcnJpaIzCHe7jpFpTKQTVBx5L
	lxLNCQYlGWMoiVCuB+agNDHSvf2i+1TMk8OU3o=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; s=default; bh=CXmNY/8Fo1D
	kghFPp76D9/nbSvQ=; b=V2EbX+tjI8ICLSg78C8XOxRK2lz7IeC/RJKHQIgxq3E
	A30hs7x7+AlOmaajTG36IsEA9d009cqsPh6rTnnwuivt0TSJctXukbDKeJXzaggr
	cWAW63Xke+NamdkHB30aIsTLSM/318qCaaVPIdqzeb4Tk7yFEVJC3CIt37Bqk99I
	=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-2.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.1 spammy=virus, antivirus, helped, gathered
X-HELO: vsmx012.vodafonemail.xion.oxcs.net
From: Achim Gratz <Stromeko AT nexgo DOT de>
To: cygwin AT cygwin DOT com
Subject: Re: Sophos Antivirus
References: <8675fd88-d4a9-d022-885f-f03fa2082390 AT cs DOT umass DOT edu>
Date: Tue, 09 Apr 2019 18:38:45 +0200
In-Reply-To: <8675fd88-d4a9-d022-885f-f03fa2082390@cs.umass.edu> (Eliot Moss's	message of "Mon, 8 Apr 2019 18:06:22 -0400")
Message-ID: <87h8b7jfqi.fsf@Rainer.invalid>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain

Eliot Moss writes:
> At present, Sophos is enterprise managed on my computer, which means
> I can't even personally install the hotfix, but I might convince my
> organization to help me do it, etc.  Just gathered information while
> I await their response ...

No experience with Sophos, but certain heuristics in virus scanners
apparently are only applied when the file in question has not yet been
scanned.  So it is sometimes helpful to run an explicit scan of the
install dir.

With other antivirus solutions only explicit whitelisting or exclusion
of the installation directory actually helped.  The exclusion usually
only needs to target the "real-time" and heuristic engines of the
antivirus package, which might make it more acceptable for corporate IT
security.  It is also helpful to ask them to escalate to the vendor
support, since usually the vendors know about how their products
interact with Cygwin and have a solution ready for when the customer
asks.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Samples for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldSamplesExtra

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple