From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 48396 invoked by alias); 28 Jun 2017 22:03:17 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 48384 invoked by uid 89); 28 Jun 2017 22:03:16 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=0.2 required=5.0 tests=AWL,BAYES_50,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2 spammy=Voice, xlanuchexe, TrojanIt, UD:XLanuch.exe X-HELO: TheWorld.com Received: from pcls4.std.com (HELO TheWorld.com) (192.74.137.144) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Wed, 28 Jun 2017 22:03:15 +0000 Received: from pcls8.std.com (pcls8.std.com [192.74.137.148]) by TheWorld.com (8.14.5/8.14.5) with ESMTP id v5SM2UGG013503; Wed, 28 Jun 2017 18:02:32 -0400 Received: from pcls8 (localhost [127.0.0.1]) by pcls8.std.com (8.14.5/8.14.5) with ESMTP id v5SM2OkD016406; Wed, 28 Jun 2017 18:02:25 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <22868.10096.929488.407450@gargle.gargle.HOWL> Date: Wed, 28 Jun 2017 22:03:00 -0000 From: bzs@theworld.com To: Erik Soderquist Cc: cygwin Subject: Re: XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission In-Reply-To: References: X-IsSubscribed: yes X-SW-Source: 2017-06/txt/msg00400.txt.bz2 I would also think about X11 permissions. Someone might be scanning for activity on port 6000 (&c) and if they find something and it's not locked down (see for example 'xhost(1)') it's trivial to just launch X11 apps on your system which can cause all sorts of mischief. -- -Barry Shein Software Tool & Die | bzs@TheWorld.com | http://www.TheWorld.com Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD The World: Since 1989 | A Public Information Utility | *oo* -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple