DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 62JLI7C43976527
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 62JLI7C43976527
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=aXuZMpBy
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 56C374C3185E
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1773955085;
	bh=Z84Nnzvi2CdWilzI9ET8aT8lgS3LebqN7zYYMXxsNgo=;
	h=Resent-From:Resent-Date:Resent-To:To:Subject:Date:References:
	List-Id:List-Unsubscribe:List-Archive:List-Post:List-Help:
	List-Subscribe:From:Reply-To:From;
	b=aXuZMpByaK7t3fnEZzOwHmVivEwrL8kMPqg17HPrJn1WVi6zVdNajq0vNAUXukDWR
	MYbxs8OmhtX0Q1iU6l+43n+vanJBk5m17YsLcx1mUXHQ7cX3lvYCUarQpwRaKh+W3u
	tPUz7nCYQWnhyMmYjBBsrXWuASlswNhf6OwBYvG4=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org BEAF54BAE7F0
Resent-From:	root <root AT sourceware DOT org>
Resent-Date:	Thu, 19 Mar 2026 21:17:17 +0000
Resent-Message-ID:	<abxn3Zk58HH98c6F AT sourceware DOT org>
Resent-To:	cygwin AT cygwin DOT com
X-Original-To:	spam AT localhost
Delivered-To:	spam AT localhost
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org A39B64BB3BD8
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org A39B64BB3BD8
ARC-Seal:	i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1773667174; cv=none;
	b=B9bqJFVi3XIw+Ow99c23u9+iokhp0gDRxBU39Lx+Dt35amspF0uFHs8GypdionQJ4MW/2aaUeLPxmuQOzshc2mYPt07ESvILAL7CmrFODMZ/PT+/lDTuNeu24VgIhHHco+4ibWOCnHl0kdzaDrqIQWPVojh0d3Xj8uE/mgJTsRI=
ARC-Message-Signature:	i=1; a=rsa-sha256; d=sourceware.org; s=key;
	t=1773667174; c=relaxed/simple;
	bh=o6t7S+0qUjLEAAR66/MW1e9Za4bnpb3FI6/O8vbc+tQ=;
	h=To:From:Subject:Date:Message-ID:Mime-Version;
	b=HcGn8atUneVlct0kiszkYqmADHxJA1fu64PjXqHnZPrxa0BxHfQ6OhB5omC1LEBPVjmYtQA3SwcIAS7T4bd0CUH8RO+d2TjLzDlFQTW0d8ePhIHM9R3mF388YukVJ0zfiaioHU0Dv1v8Vsw4PL4wGX62b7xEwPYafuaN53Hx6Us=
ARC-Authentication-Results:	i=1; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org A39B64BB3BD8
X-Injected-Via-Gmane:	http://gmane.org/
To:	cygwin AT cygwin DOT com
Subject:	Re: dig and nslookup don't work
Date:	Mon, 16 Mar 2026 09:19:16 -0400
Message-ID:	<nn0grktm33pvs96gp31q6q3lggrlti832v@4ax.com>
References:	<CAKOeJLufnZTiRNwdxDF3Vg5jPeHkXSjrPOTLvue0pPjfDrXREg AT mail DOT gmail DOT com>
	<de9add49-dc46-4a97-b8b3-c6e94fbd83a9 AT gmail DOT com>
	<CAK+zuc=+FpZwrNaHyrcmRtk7Qko2MjuJx8qehB5W2pKnfh6WOw AT mail DOT gmail DOT com>
Mime-Version:	1.0
X-Newsreader:	Forte Agent 4.2/32.1118
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Andrew Schulman via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Andrew Schulman <andrex DOT e DOT schulman AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 62JLI7C43976527

On Tue, 10 Mar 2026 09:11:13 +0800, Sharuzzaman Ahmat Raslan via Cygwin
<cygwin AT cygwin DOT com> wrote:

>On Tue, Mar 10, 2026, 8:51?AM René Berber via Cygwin <cygwin AT cygwin DOT com>
>wrote:
>
>> On 3/9/2026 2:38 AM, Joel Strasser via Cygwin wrote:
>>
>> > I recently reinstalled Cygwin on Windows 11.
>> >
>> > I added the bind-utils package to get the dig command.
>> >
>> > The command does not produce any output.
>> >
>> > I tried to reinstall the package and even reinstalled Cygwin.
>> >
>> > I included a cygcheck.out and the strace output of dig.
>>
>> strace shows the problem, and it is something installed in your system
>> that is not part of Cygwin.  Probably a security package that injects a
>> "security" library:
>>
>>  From dig_strace.txt
>>
>> --- Process 48772 created
>> --- Process 48772 loaded C:\Windows\System32\ntdll.dll at 00007ffc57f70000
>> --- Process 48772 loaded C:\Windows\System32\hmpalert.dll at
>> 00007ffc54ae0000  <------- injects itself immediately
>> --- Process 48772 loaded C:\Windows\System32\kernel32.dll at
>> 00007ffc55dd0000
>> ...
>> --- Process 48772 (pid: 649) thread 49216 created
>> --- Process 48772 (pid: 649), exception 80000001 at 00007ffc54aee296
>> ________________________________________^^^^^^^^____^^^^^^^^^^^^
>>                                          STATUS_GUARD_PAGE_VIOLATION
>>
>> If it is an anti-virus maybe create an exception?
>>
>> There's nothing Cygwin can do against other (injected) libraries.
>> --
>> R.B.
>>
>> --
>> Problem reports:      https://cygwin.com/problems.html
>> FAQ:                  https://cygwin.com/faq/
>> Documentation:        https://cygwin.com/docs.html
>> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
>
>
>
>hmpalert.dll is a critical Dynamic Link Library file for Sophos Intercept X
>and HitmanPro.Alert, designed to protect systems by monitoring and blocking
>exploit techniques. It operates by injecting itself into running processes.
>It is often associated with system crashes (BSOD), application errors, or
>performance issues

Probably a successor to Sophos Anti-Virus 7, which is listed on the BLODA
(https://cygwin.com/acronyms/).


















































































-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -