backdoor.egghead trojan in zlib-1.1.3.tar.gz

[Brian & Sara Feather]

Hello, 
I've got some BAD news. Norton just found a copy of backdoor.egghead in latest/zlib/zlib-1.1.3.tar.gz of the installation files for Cygwin that I downloaded last month (January 10). Norton also found the trojan in d:\cygwin\bin\cygz.dll and in c:\windows\temp\usr_bin_cygz.dll (twice at different times). It is also in several A00*.CPY files in c:\_RESTORE\TEMP. I have Windows ME 4.90.3000 . I have attached a copy of "cygcheck -s -v -r > cygcheck.out". I will deal with the virus problem. I don't think it can fully activate on Windows ME. My biggest concern are the several WIN2000 machines at work that may now be infected (shake, tremble, fear).
Please check your archives I have also included the setup.log from the original download.
God bless,
Brian Feather
(931) 967-9798

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cygwin.com/pipermail/cygwin/attachments/20020216/059a3157/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cygcheck.out
Type: application/octet-stream
Size: 15130 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20020216/059a3157/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: setup.log
Type: application/octet-stream
Size: 9407 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20020216/059a3157/attachment-0001.obj>
-------------- next part --------------
--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/