cygcheck.exe - virus Win32:Evo-gen

cygcheck.exe - virus Win32:Evo-gen

[Zdeněk Jäger]

Hello,

Avast Antivirus detected virus Win32:Evo-gen on:
- cygcheck.exe
- cygwin-console-helper.exe

I installed 32-bit version from "setup-x86.exe":
/usr/bin: uname -a
CYGWIN_NT-6.1 amilo 2.0.1(0.287/5/3) 2015-04-30 18:13 i686 Cygwin
/usr/bin: date
Sat May  2 18:39:16 CEST 2015

Zdenek



---
Tato zpráva byla zkontrolována na viry programem Avast Antivirus.
http://www.avast.com


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: cygcheck.exe - virus Win32:Evo-gen

[Stephen John Smoogen]

On 2 May 2015 at 10:47, Zdeněk Jäger <zjager@gsw.cz> wrote:
> Win32:Evo-gen


Could you supply some more information:

1) Where did you download it. [In case it is a bad mirror]
2) sha256sum of the files it is saying are bad?

-- 
Stephen J Smoogen.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: cygcheck.exe - virus Win32:Evo-gen

[Zdeněk Jäger]

> Win32:Evo-gen
> 1) Where did you download it. [In case it is a bad mirror]
cygwin.mirror.constant.com

> 2) sha256sum of the files it is saying are bad?
5aa493f4912e00e75d2787fd60e0b19dcce98032e29a16b4e960b103f69ebc41 *cygcheck.exe
d9490c7d4572d46415b704994ac5ab7de24c001d49257ef584c6e32bcda6b4d6 *cygwin-console-helper.exe


---
Tato zpráva byla zkontrolována na viry programem Avast Antivirus.
http://www.avast.com


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: cygcheck.exe - virus Win32:Evo-gen

[David Stacey]

On 02/05/15 21:43, Zdeněk Jäger wrote:
>> 2) sha256sum of the files it is saying are bad?
> 5aa493f4912e00e75d2787fd60e0b19dcce98032e29a16b4e960b103f69ebc41 
> *cygcheck.exe
> d9490c7d4572d46415b704994ac5ab7de24c001d49257ef584c6e32bcda6b4d6 
> *cygwin-console-helper.exe 

It is likely that these are false positives, as Avast is the only 
anti-virus tool currently flagging these up as suspicious [1] [2].
Please could you report these as suspected false positives [3].

Many thanks,

Dave.

[1] - 
https://www.virustotal.com/en/file/5aa493f4912e00e75d2787fd60e0b19dcce98032e29a16b4e960b103f69ebc41/analysis/
[2] - 
https://www.virustotal.com/en/file/d9490c7d4572d46415b704994ac5ab7de24c001d49257ef584c6e32bcda6b4d6/analysis/
[3] - https://www.avast.com/faq.php?article=AVKB21#idt_07


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple