Results 1 to 4 of 4

Thread: GNU sync (coreutils) tagged heuristically as IRCbot.wln

  1. #1
    Junior Member
    Join Date
    Jun 2012
    Location
    Durham, NC, US
    Posts
    9

    Question GNU sync (coreutils) tagged heuristically as IRCbot.wln

    A moment ago I got this:

    8/9/2012 09:20:40 (EDT) Encountered and terminated IRCBot.wln in C:\cygwin\bin\sync.exe!

    This file is the sync command from GNU (coreutils) and is used by Cygwin as such. I verified that the executable had not been modified from that in the Cygwin coreutils-8.15.1-1.tar.bz distribution. (I extracted it again and compared the two executables.) The MD5 checksum of the archive was also correct.

    How exactly does the heuristic conclude that this is IRCbot.wln?

  2. #2
    Junior Member
    Join Date
    Jun 2012
    Location
    Durham, NC, US
    Posts
    9

    Default

    Additionally, I received the following:

    8/9/2012 14:16:50 (EDT) Encountered and terminated IRCBot.wln in C:\cygwin\bin\hostname.exe!

    This is also from GNU Coreutils. It too checks out when compared to the archive.

  3. #3
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Thank you for reporting this false positive.
    The next detection update scheduled for Wednesday 2012-08-15 will fix this issue.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  4. #4
    Junior Member
    Join Date
    Jun 2012
    Location
    Durham, NC, US
    Posts
    9

    Thumbs up

    Thank you very much!!

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •