DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 62A1CEEf1911835
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org F3EDC4BA2E1A
MIME-Version: 1.0
References: <CAKOeJLufnZTiRNwdxDF3Vg5jPeHkXSjrPOTLvue0pPjfDrXREg AT mail DOT gmail DOT com>
 <de9add49-dc46-4a97-b8b3-c6e94fbd83a9 AT gmail DOT com>
In-Reply-To: <de9add49-dc46-4a97-b8b3-c6e94fbd83a9@gmail.com>
Date: Tue, 10 Mar 2026 09:11:13 +0800
Message-ID: <CAK+zuc=+FpZwrNaHyrcmRtk7Qko2MjuJx8qehB5W2pKnfh6WOw@mail.gmail.com>
Subject: Re: dig and nslookup don't work
To: The Cygwin Mailing List <cygwin AT cygwin DOT com>
From: Sharuzzaman Ahmat Raslan via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Sharuzzaman Ahmat Raslan <sharuzzaman AT gmail DOT com>
Content-Type: text/plain; charset="utf-8"
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit

On Tue, Mar 10, 2026, 8:51 AM René Berber via Cygwin <cygwin AT cygwin DOT com>
wrote:

> On 3/9/2026 2:38 AM, Joel Strasser via Cygwin wrote:
>
> > I recently reinstalled Cygwin on Windows 11.
> >
> > I added the bind-utils package to get the dig command.
> >
> > The command does not produce any output.
> >
> > I tried to reinstall the package and even reinstalled Cygwin.
> >
> > I included a cygcheck.out and the strace output of dig.
>
> strace shows the problem, and it is something installed in your system
> that is not part of Cygwin.  Probably a security package that injects a
> "security" library:
>
>  From dig_strace.txt
>
> --- Process 48772 created
> --- Process 48772 loaded C:\Windows\System32\ntdll.dll at 00007ffc57f70000
> --- Process 48772 loaded C:\Windows\System32\hmpalert.dll at
> 00007ffc54ae0000  <------- injects itself immediately
> --- Process 48772 loaded C:\Windows\System32\kernel32.dll at
> 00007ffc55dd0000
> ...
> --- Process 48772 (pid: 649) thread 49216 created
> --- Process 48772 (pid: 649), exception 80000001 at 00007ffc54aee296
> ________________________________________^^^^^^^^____^^^^^^^^^^^^
>                                          STATUS_GUARD_PAGE_VIOLATION
>
> If it is an anti-virus maybe create an exception?
>
> There's nothing Cygwin can do against other (injected) libraries.
> --
> R.B.
>
> --
> Problem reports:      https://cygwin.com/problems.html
> FAQ:                  https://cygwin.com/faq/
> Documentation:        https://cygwin.com/docs.html
> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple


hmpalert.dll is a critical Dynamic Link Library file for Sophos Intercept X
and HitmanPro.Alert, designed to protect systems by monitoring and blocking
exploit techniques. It operates by injecting itself into running processes.
It is often associated with system crashes (BSOD), application errors, or
performance issues

--
Sharuzzaman Ahmat Raslan

>
>

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple