From: Ville Mattila <mulperi@...>
Date: 2002-02-14T18:58:47+09:00
Subject: Re: Virus in Ruby-165-2 Win installer???

Dash Riprock <dazh_ribrogg@yahoo.com> writes:

> Stephan K�mper wrote:
> 
> > Hi all,
> > 
> > I just got the following virus warning when I tried to run a Ruby program:
> > 
> >     Virus name: Backdoor.EggHead
> >     File:  C:\ruby\bin\cygwin1.dll
> > 
> > Checking ruby-165-2.exe doesn't reveal anything, but trying to run the
> > installer results in a virus warnig.
> 
> I received notification today from the scanner (Symantec) that runs
> nightly on my company PC that I also have this virus in this same
> file and that it was "quarantined." I understand the virus signature
> file was updated yesterday. I suspect this is a false positive, but
> perhaps the creators/packagers might like to double-check this.

 This a known problem in the older installshield package creation
 programs. This virus is a false positive. See
 http://support.installshield.com/kb/view.asp?pcode=ALL&articleid=Q105740
 for more information.