Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe

Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe

[Gianni Mariani]

I have some reasons to suspect that http://cygwin.com/setup.exe is 
infected with a virus that Norton and McAfree don't scan. well, 
sometimes they say it's Cles or Wez or somthing.

Or it could be that it's a coincidence that as soon as I asked other 
developers to install cywin they all got it as well, and it may also be 
just a coincidence that after installing a fresh copy of everything and 
rebooted and all was *almost* fine (because some commands -like ls.exe- 
didn't install), but my machine instantly rebooted when I tried to run 
the cygwin setup the second time.

I really am not sure but I encourage everyone to make sure that I'm wrong.

This is the md5 of the setup.exe I downloaded.

616c0f35c0abf14d00a82a7bea1f1b2c  setup.exe

I really hope this is a false alarm but it's too coincidental to not 
bring to some-one's attention.

G




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe

[Elmar Haneke]

Gianni Mariani schrieb::

> I have some reasons to suspect that http://cygwin.com/setup.exe is 
> infected with a virus that Norton and McAfree don't scan. well, 
> sometimes they say it's Cles or Wez or somthing.
> This is the md5 of the setup.exe I downloaded.
> 
> 616c0f35c0abf14d00a82a7bea1f1b2c  setup.exe
> 
> I really hope this is a false alarm but it's too coincidental to not 
> bring to some-one's attention.

I did download the same file, f-prot an AntiVir did not find anything 
suspect. You should send the file the the vendors of yor AV-Software, 
the should fix their scan-engine.

Elmar




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe

[Winston Gutkowski]

Can anyone confirm or deny this? Both products mentioned are reputable virus
checkers, so it would be nice to get some official feedback on the
situation.

Thanks

Winston Gutkowski

> -----Original Message-----
> From: cygwin-owner@cygwin.com [mailto:cygwin-owner@cygwin.com]On Behalf
> Of Elmar Haneke
> Sent: Thursday, May 02, 2002 7:36
> To: cygwin@cygwin.com
> Subject: Re: Not to alarm anyone - but possible virus on
> http://cygwin.com/setup.exe
>
>
>
>
> Gianni Mariani schrieb::
>
> > I have some reasons to suspect that http://cygwin.com/setup.exe is
> > infected with a virus that Norton and McAfree don't scan. well,
> > sometimes they say it's Cles or Wez or somthing.
> > This is the md5 of the setup.exe I downloaded.
> >
> > 616c0f35c0abf14d00a82a7bea1f1b2c  setup.exe
> >
> > I really hope this is a false alarm but it's too coincidental to not
> > bring to some-one's attention.
>
> I did download the same file, f-prot an AntiVir did not find anything
> suspect. You should send the file the the vendors of yor AV-Software,
> the should fix their scan-engine.
>
> Elmar
>
>
>
>
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
>
>


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe

[Michael A Chase]

On Thu, 2 May 2002 11:04:06 -0700 Winston Gutkowski <winston.gutkowski@eztext.com> wrote:

> Can anyone confirm or deny this? Both products mentioned are reputable virus
> checkers, so it would be nice to get some official feedback on the situation.

To date, every alarm about setup.exe has been either an invalid test by the
anti-virus software or a virus infection spread by some other means.  Send
your 'infected' copy to your anti-virus vendor if you want official
feedback __just as Elmar suggested__.

Just to be certain, I confirmed my Norton Anti-Virus is completely up to
date, downloaded a fresh copy of setup.exe, and scanned it.  It was clean. 
The way setup.exe is created and distributed makes infection at Redhat
(cygwin.com) or one of the mirrors unlikely.

Since Klez is normally spread by people opening email attachments, you
should check if you have all received similar emails recently.  A full
system virus scan would be prudent on all potentially affected systems.

> > -----Original Message-----
> > From: cygwin-owner@cygwin.com [mailto:cygwin-owner@cygwin.com]On Behalf
> > Of Elmar Haneke
> > Sent: Thursday, May 02, 2002 7:36
> > To: cygwin@cygwin.com
> > Subject: Re: Not to alarm anyone - but possible virus on
> > http://cygwin.com/setup.exe

> > Gianni Mariani schrieb::
> >
> > > I have some reasons to suspect that http://cygwin.com/setup.exe is
> > > infected with a virus that Norton and McAfree don't scan. well,
> > > sometimes they say it's Cles or Wez or somthing.
> > > This is the md5 of the setup.exe I downloaded.
> > >
> > > 616c0f35c0abf14d00a82a7bea1f1b2c  setup.exe
> > >
> > > I really hope this is a false alarm but it's too coincidental to not
> > > bring to some-one's attention.
> >
> > I did download the same file, f-prot an AntiVir did not find anything
> > suspect. You should send the file the the vendors of yor AV-Software,
> > the should fix their scan-engine.

-- 
Mac :})
** I normally forward private questions to the appropriate mail list. **
Ask Smarter: http://www.tuxedo.org/~esr/faqs/smart-questions.html
Give a hobbit a fish and he eats fish for a day.
Give a hobbit a ring and he eats fish for an age.



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Not to alarm anyone - but possible virus on http://cygwin.com/setup.exe

[Larry Hall (RFK Partners, Inc)]

There is no virus in setup.exe as distributed by Cygwin.  I think there's been
enough reports on this list to confirm that this is the case.

Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
838 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX

At 02:04 PM 5/2/2002, Winston Gutkowski wrote:
>Can anyone confirm or deny this? Both products mentioned are reputable virus
>checkers, so it would be nice to get some official feedback on the
>situation.
>
>Thanks
>
>Winston Gutkowski
>
> > -----Original Message-----
> > From: cygwin-owner@cygwin.com [mailto:cygwin-owner@cygwin.com]On Behalf
> > Of Elmar Haneke
> > Sent: Thursday, May 02, 2002 7:36
> > To: cygwin@cygwin.com
> > Subject: Re: Not to alarm anyone - but possible virus on
> > http://cygwin.com/setup.exe
> >
> >
> >
> >
> > Gianni Mariani schrieb::
> >
> > > I have some reasons to suspect that http://cygwin.com/setup.exe is
> > > infected with a virus that Norton and McAfree don't scan. well,
> > > sometimes they say it's Cles or Wez or somthing.
> > > This is the md5 of the setup.exe I downloaded.
> > >
> > > 616c0f35c0abf14d00a82a7bea1f1b2c  setup.exe
> > >
> > > I really hope this is a false alarm but it's too coincidental to not
> > > bring to some-one's attention.
> >
> > I did download the same file, f-prot an AntiVir did not find anything
> > suspect. You should send the file the the vendors of yor AV-Software,
> > the should fix their scan-engine.
> >
> > Elmar
> >
> >
> >
> >
> > --
> > Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> > Bug reporting:         http://cygwin.com/bugs.html
> > Documentation:         http://cygwin.com/docs.html
> > FAQ:                   http://cygwin.com/faq/
> >
> >
>
>
>--
>Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>Bug reporting:         http://cygwin.com/bugs.html
>Documentation:         http://cygwin.com/docs.html
>FAQ:                   http://cygwin.com/faq/


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/