X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 4352D385829A
Authentication-Results: sourceware.org;
 dmarc=none (p=none dis=none) header.from=dinwoodie.org
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=dinwoodie.org
Date: Tue, 19 Jul 2022 13:40:48 +0100
From: Adam Dinwoodie <adam AT dinwoodie DOT org>
To: cygwin AT cygwin DOT com
Subject: Re: Fortinet AV reports virus in trust.exe
Message-ID: <20220719124048.7eivxtrruafh5lru@lucy.dinwoodie.org>
References: <DB4PR09MB577631D6280A8C47E58B5A55C28F9 AT DB4PR09MB5776 DOT eurprd09 DOT prod DOT outlook DOT com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <DB4PR09MB577631D6280A8C47E58B5A55C28F9@DB4PR09MB5776.eurprd09.prod.outlook.com>
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Tue, Jul 19, 2022 at 08:40:48AM +0000, Tuomo Takkula via Cygwin wrote:
> Hi,
> 
> Fortinet Antivirus reported W64/Encoder.834E!tr in my local cygwin installation. When I tried to rectify be reinstalling, Fortinet barked on the installation files as well. As this is a company box, I'm somewhat at the end of my tether  - cannot inspect or otherwise investigate the file. 
> That is I cannot check whether it's possibly a false positive or not.
> 
> What's the usual procedure for this?

https://cygwin.com/faq/faq.html#faq.setup.virus

In short: you'll need to take up the issue with Fortinet and/or your
employer's IT department.  It's very likely a false positive, and we're
not going to be able to help until or unless you can show otherwise.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple