This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: cygwin Digest 25 Jun 2018 00:46:06 -0000 Issue 10882 - virus alert
- From: David Stacey <drstacey at tiscali dot co dot uk>
- To: cygwin at cygwin dot com
- Date: Sat, 30 Jun 2018 17:09:20 +0100
- Subject: Re: cygwin Digest 25 Jun 2018 00:46:06 -0000 Issue 10882 - virus alert
- References: <d474d3c7-1b31-f290-5f57-693635c9aef9@familywatt.co.uk>
On 30/06/18 13:19, Richard Watt wrote:
Did anyone else get a virus warning from the cygwin Digest 25 Jun 2018
00:46:06 -0000 Issue 10882?
It's an unsolicited invoice from someone you've never heard of. Of
course it's malware :-)
It's an attachment to this post [1], compressed with gzip. The
compressed version passes through VirusTotal cleanly. If you unpack the
file, though, you discover that it isn't a PDF at all (surprise,
surprise) but a .NET executable. And quite a few anti-virus tools flag
it as something unpleasant [2].
Dave.
[1] - https://cygwin.com/ml/cygwin/2018-06/msg00264.html
[2] -
https://www.virustotal.com/#/file/06c5c0701c5702dbe126ca2918e3ffdec8337f2a98b80939fdd0518e44fbffa6/detection
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple