Why quarrentine cygwin sshd-session.exe

[silvermangb]

Norton just blocked cygwin sshd-session.exe has a generic idp thread. This prevents ssh into Windows with openssh from cygwin.

Is this based on an identified threat or just a general recommendation to not allow ssh clients.

[bjm]

@silvermangb

Norton just blocked cygwin sshd-session.exe has a generic idp threat.

AI
An IDP.Generic threat is a warning from antivirus software that a file is acting like malware. This warning can occur when accessing legitimate programs or games, and it can be a false positive. The issue has been reported for both Avast and AVG antivirus software.

To prevent the warning from recurring, you can try whitelisting the application. You can also check for updates to your antivirus software, as the issue has been fixed in recent updates.

Norton v24?
What does Norton 360 Security History report?

Is file signed?
fresh install or update install

Is the Cygwin Setup program, or one of the packages, infected with a virus?

Unlikely. Unless you can confirm it, please don’t report it to the mailing list. Anti-virus products have been known to detect false positives when extracting compressed tar archives. If this causes problems for you, consider disabling your anti-virus software when running the Cygwin Setup program. Read the next entry for a fairly safe way to do this.

https://www.cygwin.com/faq.html#faq.setup.setup

False Positive and False Negative Submissions Portal [here]

Submit a file or URL to Norton [here]

Report a suspected incorrect detection to Norton [here]

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious [here]

[silvermangb]

I am not reporting it, Norton blocked it. I am asking why it did.

[bjm]

@silvermangb

I am not reporting it, Norton blocked it. I am asking why it did.

Hello @silvermangb
care to share supporting screenshots?
Norton v24.x?
What does Norton 360 Security History report?
Is file signed?
fresh install or update install

I’m not familiar with cygwin sshd-session.exe nor qualified to answer “why it did”.

Norton support via Social Support | Chat | Phone [here]

[Grady_Olmstead]

I would like to know tooooo