This is the mail archive of the
cygwin@cygwin.com
mailing list for the Cygwin project.
Re: backdoor.egghead trojan in zlib-1.1.3.tar.gz
- From: Charles Wilson <cwilson at ece dot gatech dot edu>
- To: Brian & Sara Feather <bfeather at msn dot com>
- Cc: cygwin at cygwin dot com
- Date: Sat, 16 Feb 2002 14:35:27 -0500
- Subject: Re: backdoor.egghead trojan in zlib-1.1.3.tar.gz
- References: <002401c1b6fa$b0719ec0$010aa8c0@emachine>
Sigh.
False positive.
Reported 27 times already. Multiple postings over the last three days.
Every single one was a FALSE positive. Complain to symantec.
And next time, *you* check the archives.
--Chuck
P.S. When posting on an archived public mailing list, you probably don't
want to include your home phone number. Talk about bad ideas...
Brian & Sara Feather wrote:
> Hello,
>
> I've got some BAD news. Norton just found a copy of backdoor.egghead in
> latest/zlib/zlib-1.1.3.tar.gz of the installation files for Cygwin that
> I downloaded last month (January 10). Norton also found the trojan in
> d:\cygwin\bin\cygz.dll and in c:\windows\temp\usr_bin_cygz.dll (twice at
> different times). It is also in several A00*.CPY files in
> c:\_RESTORE\TEMP. I have Windows ME 4.90.3000 . I have attached a copy
> of "cygcheck -s -v -r > cygcheck.out". I will deal with the virus
> problem. I don't think it can fully activate on Windows ME. My biggest
> concern are the several WIN2000 machines at work that may now be
> infected (shake, tremble, fear).
>
> Please check your archives I have also included the setup.log from the
> original download.
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/