Cygwin setup error

[Marco Atzeri]

Am 21.04.2020 um 18:08 schrieb Antonio Cesar Rosa:
> Hello,
> 
> I do not think so. See the output from Virustotal:
> 
> 2431de4597a2162f3e1d60af90f638b41677265b07cc66fcb0231fdde452c841
> setup-x86_64.exe 1.29 MB 2020-04-21 00:31:19 UTC
> Size
> 
> 15 hours ago
> 64bits direct-cpu-clock-access overlay peexe runtime-modules
> DETECTION DETAILS BEHAVIOR COMMUNITY
> SecureAge APEX Malicious MaxSecure Trojan.Malware.300983.susgen
> Lastline MALWARE Acronis Undetected
> 
> 
> Regards,
> Cesar
> 
> 

please reply on mailing list in copy.

Virus Total with the URL https://cygwin.com/setup-x86_64.exe

gives all clean.
If you have a different result. likely you have a tampered file.

And using the signature available on
https://cygwin.com/install.html

we also have:

$ gpg2 --verify setup-x86_64.exe.sig
gpg: assuming signed data in 'setup-x86_64.exe'
gpg: Signature made Sat, Mar 21, 2020  6:35:25 PM CET
gpg:                using DSA key 1169DF9F22734F743AA59232A9A262FF676041BA
gpg: checking the trustdb
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   1  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   1  signed:   0  trust: 1-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2022-02-26
gpg: Good signature from "Cygwin <cygwin@cygwin.com>" [ultimate]
gpg: Signature made Sat, Mar 21, 2020  6:35:25 PM CET
gpg:                using RSA key 56405CF6FCC81574682A5D561A698DE9E2E56300
gpg: Good signature from "Cygwin <cygwin@cygwin.com>" [full]