On Wed, Jun 28, 2017 at 12:07 PM, Sagar Kapadia wrote: > HI, > I wish to report that Cygwin.XLaunch.exe is a Trojan and it allows > remote control of a pc without the users knowledge or permission. I > installed the cygwin package and the Xwindows server too. However, > today, I found somebody controlling my pc remotely. I know because the > mouse behaved erratically and then the XLanuch configuration screen > came up. I tried to kill it using the Task Manager but it would > restart. I had to reboot and turn off networking and then delete the > cygwin folder.
Where did you get this copy of cygwin from? Did you use the official installer package from the cygwin site? https://www.cygwin.com/setup-x86_64.exe or https://www.cygwin.com/setup-x86.exe XLaunch itself is a wizard to configure X server sessions, and if someone remote controllig your PC is happening with the legitimate XLaunch executable, I would suspect there is something else unwanted on your machine that is using XLaunch as a tool. However, if the cygwin source you downloaded from was either compromised or was not a legitimate mirror to start with, that is not a direct fault of cygwin, but rather a fault of the source of your download. > I dont know if you are aware of this issue or not, but I found it > serious enough to report. This is the first I've heard -- Erik -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
