backdoor.egghead trojan in zlib-1.1.3.tar.gz

["Brian & Sara Feather" <bfeather at msn dot com>]

Hello,

I've got some BAD news. Norton just found a copy of backdoor.egghead in latest/zlib/zlib-1.1.3.tar.gz of the installation files for Cygwin that I downloaded last month (January 10). Norton also found the trojan in d:\cygwin\bin\cygz.dll and in c:\windows\temp\usr_bin_cygz.dll (twice at different times). It is also in several A00*.CPY files in c:\_RESTORE\TEMP. I have Windows ME 4.90.3000 . I have attached a copy of "cygcheck -s -v -r > cygcheck.out". I will deal with the virus problem. I don't think it can fully activate on Windows ME. My biggest concern are the several WIN2000 machines at work that may now be infected (shake, tremble, fear).

Please check your archives I have also included the setup.log from the original download.

God bless,

Brian Feather

(931) 967-9798

 

Attachment: cygcheck.out
Description: Binary data

Attachment: setup.log
Description: Binary data

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/