This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

RE: Cygcrypt-0.dll ad-aware trojan alert


On 21 August 2007 16:56, Greg Chicares wrote:

> On 2007-08-21 15:27Z, Dave Korn wrote:
>> On 21 August 2007 16:05, Dave Korn wrote:
>> 
>>> On 21 August 2007 15:52, PTBluster wrote:
>>> 
>>>> I just ran Ad-aware and got a hit for the IROffer object which uses
>>>> cygcrypt-0.dll. I've searched Ad-ware forum and with Google but could not
>>>> find much. I think cygcrypt-0.dll is a legit library file so I am wondering
>>>> if this hit is significant?
>>>   Almost certainly a false alarm... hang on, I'll update my .def file and
>>> check for you.
>> 
>>   Reproduced.  Yep, it's a false alarm.  md5sum still the same as
>> freshly-extracted copy from the package tarball.
> 
> FWIW, I ran 'cygcrypt-0.dll' with md5sum fcaaad96b6b4e41dbaf9076109dcb964
>   through http://virusscan.jotti.org/
> and its twenty malware scanners all found nothing. Perhaps that helps if the OP
> wishes to report this false positive to Ad-aware.

  Thanks for the reminder, but really it's not as much use saying "Someone told
me that jotti cleared it" as going to jotti and running the test yourself and
cutting and pasting all the results into the false positive report message, so I
did.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]