symantec false positive on cygwin-1.7.30-1 32bit

symantec false positive on cygwin-1.7.30-1 32bit

[Marco Atzeri]

I just opened a false positive report as Symantec Endpoint Protection
just declared that cygwin-1.7.30-1 32 bit contains  Trojan.ADH.2
in locale.exe and tzset.exe

Last time I made a similar report on one of my own packages,
they updated the database in one day.

Crossing finger
Marco



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: symantec false positive on cygwin-1.7.30-1 32bit

[Kptain]

Same status for me!

I was thinking it could become from FTP provider, but by using a new mirror
site coming from CH, I've found same issue.

Please note also that this issue was present in previous release 1.7.29, I
was waiting for last update to see if it has been cleaned. 

Thanks to check these deliveries,

Stephane



--
View this message in context: http://cygwin.1069669.n5.nabble.com/symantec-false-positive-on-cygwin-1-7-30-1-32bit-tp108870p108888.html
Sent from the Cygwin list mailing list archive at Nabble.com.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: symantec false positive on cygwin-1.7.30-1 32bit

[Marco Atzeri]

On 27/05/2014 11:46, Kptain wrote:
>
> Same status for me!
>
> I was thinking it could become from FTP provider, but by using a new mirror
> site coming from CH, I've found same issue.
>
> Please note also that this issue was present in previous release 1.7.29, I
> was waiting for last update to see if it has been cleaned.
>
> Thanks to check these deliveries,
>
> Stephane
>

 From Symantec:

"
In relation to submission [3520634].

Upon further analysis and investigation we have verified your submission 
and, as such, the detection(s) for the following file(s) will be removed 
from our products:

	8BF7925F25CCEA0AAEC7A55A47D7B688 - locale.exe
	67BCB92191272EE1D204C557741C81AA - tzset.exe
"
and I can confirm that the latest update is ignoring the two files.

Unfortunately I suspect we will see more of this crap in the future.
Trojan.ADH.2 seems a very braod and popular item on
their antivirus definition...

Marco



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple