trojans in cygwin

Monika Pietrzyk
Wed Nov 3 14:17:00 GMT 2010


Half a year ago I've downloaded a new version of cygwin. Since then I had a 
big problem on my laptop (there was a trojan which was slowing down my 
computer so that I could not work on it and destroying the sound driver). I 
was trying to localize the source of the problem for several months without 
success (I was checking all software I had on my laptop but not cygwin, I 
thought it is safe). Only last days I understood that the trojan must sit in 
cygwin. And I was right. The trojan ATRAPS!IK was sitting in csih package! 

So, I've downloaded the newest version of cygwin (v. 1.7.5-1) hoping to get 
clean software. But it is even worse: there are already two trojans in 
cygwin!!! They were found by Amsisoft Anti-Malware. Below there are results 
of the scan: 

C:\Documents and Settings\toshiba\Desktop\CYGWIN 1.7.5-1\ftp%3a%2f%2fftp.uni-\release\arj\arj-3.10.22-1.tar.bz2/usr\bin 
\arj.exe     detected: Trojan-Dropper!IK 
C:\Documents and Settings\toshiba\Desktop\CYGWIN 1.7.5-1\ftp%3a%2f%2fftp.uni-\release\arj\arj-3.10.22-1.tar.bz2/ 
rearj.1     detected: Trojan-Dropper!IK 
C:\Documents and Settings\toshiba\Desktop\CYGWIN 1.7.5-1\ftp%3a%2f%2fftp.uni-\release\csih\csih-0.9.1-1.tar.bz2/usr\lib 
\csih\getAccountName     detected: Trojan.ATRAPS!IK 
C:\Documents and Settings\toshiba\Desktop\CYGWIN 1.7.5-1\ftp%3a%2f%2fftp.uni-\release\csih\csih-0.9.1-1.tar.bz2/usr\share 
\doc\Cygwin\csih.README     detected: Trojan.ATRAPS!IK 

Can you advice to me where I can download clean cygwin without trojans? 


Open WebMail Project (

Problem reports:
Unsubscribe info:

More information about the Cygwin mailing list