Cygwin setup reporter as malware

[Oskar Skog]

On 2022-12-07 23:54, Dan Harkless via Cygwin wrote:

> No.  It's normal and common for software like Cygwin, which has the 
> power to be used maliciously (as opposed to, say, a Minesweeper game or 
> something), to have false positives on VirusTotal for a handful of 
> vendors.  I've never heard of SecureAge or Trapmine (hmm, maybe it 
> *would* flag Minesweeper...), and I'm pretty well educated in the 
> anti-malware space, so if it were me, I'd just ignore those false 
> positives and pay attention to the credible AV software results (and the 
> Community Score).


You may have thought you were joking, but...

https://www.virustotal.com/gui/file/bcff89311d792f6428468e813ac6929a346a979f907071c302f418d128eaaf41

This is not just *a* minesweeper game, it is *the* minesweeper game
from Window XP.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x473CD05C78734E49.asc
Type: application/pgp-keys
Size: 2444 bytes
Desc: OpenPGP public key
URL: <https://cygwin.com/pipermail/cygwin/attachments/20221209/58e30029/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 665 bytes
Desc: OpenPGP digital signature
URL: <https://cygwin.com/pipermail/cygwin/attachments/20221209/58e30029/attachment-0001.sig>