This is the mail archive of the mailing list for the Cygwin project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: backdoor.egghead trojan in zlib-1.1.3.tar.gz


False positive.

Reported 27 times already.  Multiple postings over the last three days. 
  Every single one was a FALSE positive.  Complain to symantec.

And next time, *you* check the archives.


P.S. When posting on an archived public mailing list, you probably don't 
want to include your home phone number.  Talk about bad ideas...

Brian & Sara Feather wrote:

> Hello,
> I've got some BAD news. Norton just found a copy of backdoor.egghead in 
> latest/zlib/zlib-1.1.3.tar.gz of the installation files for Cygwin that 
> I downloaded last month (January 10). Norton also found the trojan in 
> d:\cygwin\bin\cygz.dll and in c:\windows\temp\usr_bin_cygz.dll (twice at 
> different times). It is also in several A00*.CPY files in 
> c:\_RESTORE\TEMP. I have Windows ME 4.90.3000 . I have attached a copy 
> of "cygcheck -s -v -r > cygcheck.out". I will deal with the virus 
> problem. I don't think it can fully activate on Windows ME. My biggest 
> concern are the several WIN2000 machines at work that may now be 
> infected (shake, tremble, fear).
> Please check your archives I have also included the setup.log from the 
> original download.

Unsubscribe info:
Bug reporting:

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]