This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission
- From: Erik Soderquist <ErikSoderquist at gmail dot com>
- To: cygwin <cygwin at cygwin dot com>
- Date: Wed, 28 Jun 2017 12:21:03 -0400
- Subject: Re: XLanuch.exe is a Trojan-It allows remote control of my pc without my knowledge or permission
- Authentication-results: sourceware.org; auth=none
- References: <CAPXRkNEx44KFypaqj+hjrF+r8Es-xSmBTCcT2PED7XSrAchGNw@mail.gmail.com>
On Wed, Jun 28, 2017 at 12:07 PM, Sagar Kapadia wrote:
> HI,
> I wish to report that Cygwin.XLaunch.exe is a Trojan and it allows
> remote control of a pc without the users knowledge or permission. I
> installed the cygwin package and the Xwindows server too. However,
> today, I found somebody controlling my pc remotely. I know because the
> mouse behaved erratically and then the XLanuch configuration screen
> came up. I tried to kill it using the Task Manager but it would
> restart. I had to reboot and turn off networking and then delete the
> cygwin folder.
Where did you get this copy of cygwin from? Did you use the official
installer package from the cygwin site?
https://www.cygwin.com/setup-x86_64.exe or
https://www.cygwin.com/setup-x86.exe
XLaunch itself is a wizard to configure X server sessions, and if
someone remote controllig your PC is happening with the legitimate
XLaunch executable, I would suspect there is something else unwanted
on your machine that is using XLaunch as a tool.
However, if the cygwin source you downloaded from was either
compromised or was not a legitimate mirror to start with, that is not
a direct fault of cygwin, but rather a fault of the source of your
download.
> I dont know if you are aware of this issue or not, but I found it
> serious enough to report.
This is the first I've heard
-- Erik
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple