* Win32.FunTime.d virus in cygwin1.dll
@ 2000-04-11 9:35 Powell, Walt - TOP
2000-04-11 9:53 ` Chris Faylor
0 siblings, 1 reply; 2+ messages in thread
From: Powell, Walt - TOP @ 2000-04-11 9:35 UTC (permalink / raw)
To: 'insight@sourceware.cygnus.com'
Cc: Dorning, Kevin E - KGI-2, Liu, Tsu-huei- TOP
Gentlemen:
Our sysop has informed me that the file cygwin1.dll contains a virus called
the Win32.FunTime.d.
I obtained this file from the gzipped file egcs-1.1.1-cygb20.tar.gz,
obtained from an earlier cygwin download. As far as I can tell, cygwin1.dll
has not been altered at my site, and if this is true, the virus must have
originated at the cygnus site.
I am deeply concerned about this possibility. Can you provide any
information or a secure version of cygwin1.dll?
Sincerely,
Walter Powell
Electrical Engineer (Consultant)
Daytime Phone: 360-418-8810
FAX: 360-418-8446
Pager: 503-514-5951
Mail Stop : TOP/DITT2
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Win32.FunTime.d virus in cygwin1.dll
2000-04-11 9:35 Win32.FunTime.d virus in cygwin1.dll Powell, Walt - TOP
@ 2000-04-11 9:53 ` Chris Faylor
0 siblings, 0 replies; 2+ messages in thread
From: Chris Faylor @ 2000-04-11 9:53 UTC (permalink / raw)
To: Powell, Walt - TOP
Cc: 'insight@sourceware.cygnus.com',
Dorning, Kevin E - KGI-2, Liu, Tsu-huei- TOP
On Tue, Apr 11, 2000 at 09:38:04AM -0700, Powell, Walt - TOP wrote:
>Our sysop has informed me that the file cygwin1.dll contains a virus called
>the Win32.FunTime.d.
>
>I obtained this file from the gzipped file egcs-1.1.1-cygb20.tar.gz,
>obtained from an earlier cygwin download. As far as I can tell, cygwin1.dll
>has not been altered at my site, and if this is true, the virus must have
>originated at the cygnus site.
>
>I am deeply concerned about this possibility. Can you provide any
>information or a secure version of cygwin1.dll?
I am not sure why you are sending email to the insight mailing list concerning
a DLL that you extracted from an EGCS tar file downloaded from a non-cygnus
web site.
However, we receive false alarms about this on a regular basis. There is
one virus-checking package which returns a fals positive on the Cygwin DLL.
That is not to say that it is impossible that your DLL is infected. I
would try testing it with multiple virus checking packages. If they all agree
then you probably do have an infected DLL. You can find a new DLL to download
at http://sourceware.cygnus.com/cygwin/ .
Christopher Faylor
Cygwin Engineering Manager
Cygnus Solutions, a Red Hat company
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2000-04-11 9:53 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2000-04-11 9:35 Win32.FunTime.d virus in cygwin1.dll Powell, Walt - TOP
2000-04-11 9:53 ` Chris Faylor
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).