Re: cygcrypt-0.dll infected

2005-01-11 Thread Don Hayward
It looks like Trend has updated it definitions. I had the same problem. Looking in the whatsnew.txt for the latest pattern file, 2.341.00, I saw that the virus definition for the BKDR_HACDEF.M was modified, so I applied it. After that I was able to reinstall the crypt package and did not set

Re: cygcrypt-0.dll infected

2005-01-10 Thread Walter Garcia-Fontes
* Igor Pechtchanski <[EMAIL PROTECTED]> [050110 21:39]: > It's amazing how many people use broken anti-virus software, judging by > the number of times this was reported. The real solution is to get the > anti-virus patterns fixed. One workaround that was suggested was to > recompile libcrypt, wh

Re: cygcrypt-0.dll infected

2005-01-10 Thread Eddie Chan
All, Thank you all for your input. Apparently the Blackdoor virus include the cypcrypt-0.dll. Even we are not attached by the virus, the virus scan profile has been update to deal with this virus. During scheduled and real time scan, cypcrypt-0.dll was removed. Worstly, our proxy server has als

Re: cygcrypt-0.dll infected

2005-01-10 Thread Christopher Faylor
On Tue, Jan 11, 2005 at 12:27:00AM +0100, Markus Sch?nhaber wrote: >Igor Pechtchanski wrote: >>I'm half-tempted to suggest leaving the package as-is, just to force >>people to complain to their anti-virus provider. Unfortunately, all these >>complaints are more likely to go to this list, thus riva

Re: cygcrypt-0.dll infected

2005-01-10 Thread Markus Schönhaber
Igor Pechtchanski wrote: I'm half-tempted to suggest leaving the package as-is, just to force people to complain to their anti-virus provider. Unfortunately, all these complaints are more likely to go to this list, thus rivaling the traffic in the "obscenity of cygwin" thread (and we can't have th

Re: cygcrypt-0.dll infected

2005-01-10 Thread Christopher Faylor
On Mon, Jan 10, 2005 at 04:40:57PM -0500, Dick Repasky wrote: >Rather than telling users to bug the anti-virus company it might be worth >having someone from cygwin contact them to explain the issue. It might >also be worth doing a little bit of home work. That is, get a copy of the >malware, unp

Re: cygcrypt-0.dll infected

2005-01-10 Thread Dick Repasky
It may be worth thinking about what's actually happened here. Take a look at the technical description at http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HACDEF.M&VSect=T . One of the characteristics of the malware is that it hides a file named cygcrypt-0.dll. The descri

Re: cygcrypt-0.dll infected

2005-01-10 Thread Corinna Vinschen
On Jan 10 15:35, Igor Pechtchanski wrote: > I'm half-tempted to suggest leaving the package as-is, just to force > people to complain to their anti-virus provider. Unfortunately, all these > complaints are more likely to go to this list, thus rivaling the traffic > in the "obscenity of cygwin" thr

RE: cygcrypt-0.dll infected

2005-01-10 Thread Harig, Mark
> > It's amazing how many people use broken anti-virus software, > judging by > the number of times this was reported. The real solution is > to get the > anti-virus patterns fixed. One workaround that was suggested was to > recompile libcrypt, which removes the pattern (one can assume that th

Re: cygcrypt-0.dll infected

2005-01-10 Thread Igor Pechtchanski
On Mon, 10 Jan 2005, Eddie Chan wrote: > Hi, > > My weekly virus scan (office scan) has removed the cygcrypt-0.dll which > was detected as infected by Backdoor.IRC.Aladin.R. I did some search on > the internet and found that "Backdoor" virus comes with > "cygcrypt-0.dll". I am guess that the virus

cygcrypt-0.dll infected

2005-01-10 Thread Eddie Chan
Hi, My weekly virus scan (office scan) has removed the cygcrypt-0.dll which was detected as infected by Backdoor.IRC.Aladin.R. I did some search on the internet and found that "Backdoor" virus comes with "cygcrypt-0.dll". I am guess that the virus scan has been updated to remove "Backdorr.IRC.A