Trojan associated with rsync and wget

bob sandefur rsandefur@cam-llc.com
Tue May 3 16:58:00 GMT 2005


Hi-

Norton antivirus thinks cygwin wget and rsync are trying to Trojan my
machines (first reported in December)
EG
Details:
Rule "Default Block Phinneas Phucker Trojan horse" blocked communication.
Local address: All local network adapters(2801).
Process name is "C:\cygwin\bin\rsync.exe".

And the net says wget and rsync do have this problem  (try google rsync
Trojan)
EG
http://linuxreviews.org/gentoo/gentoo_trojan_howto/.

I downloaded and compiled wget and rsync from net and replaced cygwin
versions - so far Norton has said northing

Norton doesn't complain very often so this may not be a fix

Anyone know if Norton and I are  unduly paranoid or if this is a real
threat?

Thanx


Robert (Bob) L. Sandefur PE
Senior Geostatistician / Reserve Analyst 
CAM 200 Union Suite G-13 Lakewood, Co
80228
rsandefur@cam-llc.com
303 472-3240 (cell) <-best choice
303 716-1617 ext 14




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/



More information about the Cygwin mailing list