DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 62JLI7C43976527
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 62JLI7C43976527
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=aXuZMpBy
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 56C374C3185E
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1773955085;
	bh=Z84Nnzvi2CdWilzI9ET8aT8lgS3LebqN7zYYMXxsNgo=;
	h=Resent-From:Resent-Date:Resent-To:To:Subject:Date:References:
	 List-Id:List-Unsubscribe:List-Archive:List-Post:List-Help:
	 List-Subscribe:From:Reply-To:From;
	b=aXuZMpByaK7t3fnEZzOwHmVivEwrL8kMPqg17HPrJn1WVi6zVdNajq0vNAUXukDWR
	 MYbxs8OmhtX0Q1iU6l+43n+vanJBk5m17YsLcx1mUXHQ7cX3lvYCUarQpwRaKh+W3u
	 tPUz7nCYQWnhyMmYjBBsrXWuASlswNhf6OwBYvG4=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org BEAF54BAE7F0
Resent-From: root <root AT sourceware DOT org>
Resent-Date: Thu, 19 Mar 2026 21:17:17 +0000
Resent-Message-ID: <abxn3Zk58HH98c6F AT sourceware DOT org>
Resent-To: cygwin AT cygwin DOT com
X-Original-To: spam AT localhost
Delivered-To: spam AT localhost
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org A39B64BB3BD8
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org A39B64BB3BD8
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1773667174; cv=none;
 b=B9bqJFVi3XIw+Ow99c23u9+iokhp0gDRxBU39Lx+Dt35amspF0uFHs8GypdionQJ4MW/2aaUeLPxmuQOzshc2mYPt07ESvILAL7CmrFODMZ/PT+/lDTuNeu24VgIhHHco+4ibWOCnHl0kdzaDrqIQWPVojh0d3Xj8uE/mgJTsRI=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1773667174; c=relaxed/simple;
 bh=o6t7S+0qUjLEAAR66/MW1e9Za4bnpb3FI6/O8vbc+tQ=;
 h=To:From:Subject:Date:Message-ID:Mime-Version;
 b=HcGn8atUneVlct0kiszkYqmADHxJA1fu64PjXqHnZPrxa0BxHfQ6OhB5omC1LEBPVjmYtQA3SwcIAS7T4bd0CUH8RO+d2TjLzDlFQTW0d8ePhIHM9R3mF388YukVJ0zfiaioHU0Dv1v8Vsw4PL4wGX62b7xEwPYafuaN53Hx6Us=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org A39B64BB3BD8
X-Injected-Via-Gmane: http://gmane.org/
To: cygwin AT cygwin DOT com
Subject: Re: dig and nslookup don't work
Date: Mon, 16 Mar 2026 09:19:16 -0400
Message-ID: <nn0grktm33pvs96gp31q6q3lggrlti832v@4ax.com>
References: <CAKOeJLufnZTiRNwdxDF3Vg5jPeHkXSjrPOTLvue0pPjfDrXREg AT mail DOT gmail DOT com>
 <de9add49-dc46-4a97-b8b3-c6e94fbd83a9 AT gmail DOT com>
 <CAK+zuc=+FpZwrNaHyrcmRtk7Qko2MjuJx8qehB5W2pKnfh6WOw AT mail DOT gmail DOT com>
Mime-Version: 1.0
X-Newsreader: Forte Agent 4.2/32.1118
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Andrew Schulman via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Andrew Schulman <andrex DOT e DOT schulman AT gmail DOT com>
Content-Type: text/plain; charset="utf-8"
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 62JLI7C43976527

On Tue, 10 Mar 2026 09:11:13 +0800, Sharuzzaman Ahmat Raslan via Cygwin
<cygwin AT cygwin DOT com> wrote:

>On Tue, Mar 10, 2026, 8:51?AM René Berber via Cygwin <cygwin AT cygwin DOT com>
>wrote:
>
>> On 3/9/2026 2:38 AM, Joel Strasser via Cygwin wrote:
>>
>> > I recently reinstalled Cygwin on Windows 11.
>> >
>> > I added the bind-utils package to get the dig command.
>> >
>> > The command does not produce any output.
>> >
>> > I tried to reinstall the package and even reinstalled Cygwin.
>> >
>> > I included a cygcheck.out and the strace output of dig.
>>
>> strace shows the problem, and it is something installed in your system
>> that is not part of Cygwin.  Probably a security package that injects a
>> "security" library:
>>
>>  From dig_strace.txt
>>
>> --- Process 48772 created
>> --- Process 48772 loaded C:\Windows\System32\ntdll.dll at 00007ffc57f70000
>> --- Process 48772 loaded C:\Windows\System32\hmpalert.dll at
>> 00007ffc54ae0000  <------- injects itself immediately
>> --- Process 48772 loaded C:\Windows\System32\kernel32.dll at
>> 00007ffc55dd0000
>> ...
>> --- Process 48772 (pid: 649) thread 49216 created
>> --- Process 48772 (pid: 649), exception 80000001 at 00007ffc54aee296
>> ________________________________________^^^^^^^^____^^^^^^^^^^^^
>>                                          STATUS_GUARD_PAGE_VIOLATION
>>
>> If it is an anti-virus maybe create an exception?
>>
>> There's nothing Cygwin can do against other (injected) libraries.
>> --
>> R.B.
>>
>> --
>> Problem reports:      https://cygwin.com/problems.html
>> FAQ:                  https://cygwin.com/faq/
>> Documentation:        https://cygwin.com/docs.html
>> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
>
>
>
>hmpalert.dll is a critical Dynamic Link Library file for Sophos Intercept X
>and HitmanPro.Alert, designed to protect systems by monitoring and blocking
>exploit techniques. It operates by injecting itself into running processes.
>It is often associated with system crashes (BSOD), application errors, or
>performance issues

Probably a successor to Sophos Anti-Virus 7, which is listed on the BLODA
(https://cygwin.com/acronyms/).


















































































-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple