I run Cygwin on a daily basis. This morning, I received a notification that cygrunsrv.exe contained Fraud.SoftCop. Shortly after that, I received the same notification on tail.exe. These have been installed for a long time, and I suspect this to be a false positive. Here's the info:

OS: Windows XP SP3 (plus all of the latest updates, still has IE6 though)
Browser: Firefox v2.0.0.20
Spybot: v1.6.0.31 - Updated 10/28/2009
Occurrence: When running Cygwin programs
From Resident.log:
10/28/2009 9:49:00 AM Encountered and terminated Fraud.SoftCop in C:\cygwin\bin\cygrunsrv.exe!
10/28/2009 9:50:24 AM Encountered and terminated Fraud.SoftCop in C:\cygwin\bin\tail.exe!
10/28/2009 10:33:17 AM Encountered and terminated Fraud.SoftCop in C:\cygwin\bin\gzip.exe!

I even re-downloaded the package that tail.exe is contained in, extracted it, and I still get the notification when I run that program. The package I downloaded is http://mirror.mcs.anl.gov/cygwin/rel...6.10-2.tar.bz2
Of course, you'll need more Cygwin files/apps to extract and run tail.exe.

Can you look into this to see if it is a false positive?

If there's any other info you need, let me know.

Thanks in advance!