X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 888CB395A455
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1670460444;
	bh=XXB5lIEpO/L9Ufoit93Z/P3F4TsApsfDz+xnl4+dLdI=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	 From;
	b=gaJNZiKkpG9piWe6ga6sNYHBvuLKS3nTAAz9rlEr19o83jKsY7wlgdXpuvDKcphn9
	 kRQEoD+dw4piHvDPATnZx8YGGre+NiV52PK1VcyruFSyBPBiTn0SjvjC3LNOfYVgqt
	 BLNe7snC8IRPdZs9ydU+BA4HnA6StbP1XdosO8wE=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org B045B395B068
X-Gm-Message-State: ANoB5pmHTYh/4CKgfI7RXc5TxJRWJ5rtIrs4SPQekk7r8waxkV/ktQWR
 NWsWTZibZMRPV91H0WzFzBj37gM0I5dGSxch5C8=
X-Google-Smtp-Source: AA0mqf6Y5C9FJOioeZ+Bx2Dzivc6TmF5AOTvj9ncZ21jhspqHOZog4eDYDux81WlKSiumHJkt63b9fUXnOrx4BTHC6E=
X-Received: by 2002:ac8:1109:0:b0:3a5:ef4:675d with SMTP id
 c9-20020ac81109000000b003a50ef4675dmr71516433qtj.409.1670460403527; Wed, 07
 Dec 2022 16:46:43 -0800 (PST)
MIME-Version: 1.0
References: <AS8PR07MB714100AE9CFC6D5AAEE34179D91A9 AT AS8PR07MB7141 DOT eurprd07 DOT prod DOT outlook DOT com>
In-Reply-To: <AS8PR07MB714100AE9CFC6D5AAEE34179D91A9@AS8PR07MB7141.eurprd07.prod.outlook.com>
Date: Wed, 7 Dec 2022 17:46:17 -0700
X-Gmail-Original-Message-ID: <CANV9t=Qpm3W3weZDr0x5mDUBBpDq9s2Q6JURSSRzZfX9aFpUPQ AT mail DOT gmail DOT com>
Message-ID: <CANV9t=Qpm3W3weZDr0x5mDUBBpDq9s2Q6JURSSRzZfX9aFpUPQ@mail.gmail.com>
Subject: Re: Cygwin setup reporter as malware
To: cygwin AT cygwin DOT com
X-Provags-ID: V03:K1:d7hCVkl8RJOKQGT6HVf7mwzeZBbPkTibyPxGP+Xj2N+Yo7rSPfb
 RXuFzxT8WdLRRVhd1DGZo198rYJST/LkOjHJHwPVlhq5XCI0P9M1ZgoBUvH6/Wg63PxAFLC
 w3Xdu1ejYlWVbhl5MV+gSFWZUTvM1Tr/wHb5/rJ0HjFGTxH5uI4dOlh920Bn8zEO2OwxeYE
 LiRmOoesKjH6Yi1h4Q37Q==
UI-OutboundReport: notjunk:1;M01:P0:1fRh896otEc=;6TfoW0eF+B8tH/ZTDVb4tYTl7s+
 it2rDPzAFpGICtQBb8pxfvBkzKB6X8bxEtph+FI/S4ml5dPTSSNCWVGaE5WQcDk+EJgi2m/On
 z3PBw2VRzXJl6jmTMh9W6E/1DJxM8t4joET6fXnFR9uv5mFiuY3whwC4oeQYrnT6zgHnV9/Nu
 lrDB9/qKsGCrEx2Qg80c96OkWG3/prDHvCKbVhm/Ym6vD4pFjRkCTdU8btzyJ/cHVbD9beSVr
 pxsHLBhLQy1/AJD5YefoaWibLgMbFiotFKx6upjuVvvjO4GdsSMeZwhr2dv3VDCR1mipSelL/
 2VvukWuUdW0sX4I2Wx8/1WJcULRju0KdYDkNkrkx5SNT6oUELVcJDOpW/fHEkqNAQRxyX8RSY
 QVGQ4X2JmDghVSIAeFCKahQpQOADvaBVSk2turXVeTfsh6gr73CJMLo/VSCNI2L0F3uY+sS1b
 NG5ddrrmv8WdVLG3oW4bipQ2ZJEG8P792WHwzo21e1DtPfH352RKTaDY+NbhF45e5PzPtdGvy
 jcHpzi8GMfRojZKrCgjIIWijP7itIonEsdHXyA4fAOSMvsHKSYKSlXgbzV4DxjzxCazdj/Oqe
 PpcnCK81XQ/M3nciJ52t84A9Ajgab3/8zbENN4I5bFgSX9oAVV3Jw0NxK6DvFga7WTpydXC7R
 y6vyCfK+v3Ws6GtNg0a+Gmt7b2o+9tAzLVjX8iRLLqKp7IMS/KabdSYnMTAVJrOKre+991CWF
 /5cmk9S+MomIlGersx7DpbB6/thArZJSrKbDin0eeYIFU+eP+K0KhguVcitl2Tg6lXqfyNScO
 Y6sj9tzW+eTD/+bvu7gi4Ce7QWZmWJkO/1hTwbpkmg52TkbKwqynsLYHTcHxU/UnWCB6Jayky
 ooyHlwm1adhjbafvcnvVcESMXjx4vQA9UMXd2OdBK0UVwm8YgPB7bWUfpRR4wEBinPdnGKcgt
 CemVtgsvIkxmNYx9xf4n+8AIpt8=
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00, FREEMAIL_FROM,
 HTML_MESSAGE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2,
 SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Bill Stewart via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Bill Stewart <bstewart AT iname DOT com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Wed, Dec 7, 2022 at 9:21 AM Sylwester Rutkowski wrote:

The setup-x86_64.exe is reported as malicious at
> https://www.virustotal.com/gui/file/edd0a64dc65087ffe453ca94b267169b39458a983b29ac31320fcaa983d0f97e/detection
>
> Can this be resolved somehow?


This is, of course, a false positive.

There are basically two things you can do:

1. Exempt it from your scanner.

2. Report it to the vendor as a false positive.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple