Re: dig and nslookup don't work

Andrew Schulman via Cygwin <[email protected]> Mon, 16 Mar 2026 09:19:16 -0400
Newsgroups gmane.os.cygwin
Message-ID <[email protected]>
On Tue, 10 Mar 2026 09:11:13 +0800, Sharuzzaman Ahmat Raslan via Cygwin
<[email protected]> wrote:

>On Tue, Mar 10, 2026, 8:51?AM RenĂ© Berber via Cygwin <[email protected]>
>wrote:
>
>> On 3/9/2026 2:38 AM, Joel Strasser via Cygwin wrote:
>>
>> > I recently reinstalled Cygwin on Windows 11.
>> >
>> > I added the bind-utils package to get the dig command.
>> >
>> > The command does not produce any output.
>> >
>> > I tried to reinstall the package and even reinstalled Cygwin.
>> >
>> > I included a cygcheck.out and the strace output of dig.
>>
>> strace shows the problem, and it is something installed in your system
>> that is not part of Cygwin.  Probably a security package that injects a
>> "security" library:
>>
>>  From dig_strace.txt
>>
>> --- Process 48772 created
>> --- Process 48772 loaded C:\Windows\System32\ntdll.dll at 00007ffc57f70000
>> --- Process 48772 loaded C:\Windows\System32\hmpalert.dll at
>> 00007ffc54ae0000  <------- injects itself immediately
>> --- Process 48772 loaded C:\Windows\System32\kernel32.dll at
>> 00007ffc55dd0000
>> ...
>> --- Process 48772 (pid: 649) thread 49216 created
>> --- Process 48772 (pid: 649), exception 80000001 at 00007ffc54aee296
>> ________________________________________^^^^^^^^____^^^^^^^^^^^^
>>                                          STATUS_GUARD_PAGE_VIOLATION
>>
>> If it is an anti-virus maybe create an exception?
>>
>> There's nothing Cygwin can do against other (injected) libraries.
>> --
>> R.B.
>>
>> --
>> Problem reports:      https://cygwin.com/problems.html
>> FAQ:                  https://cygwin.com/faq/
>> Documentation:        https://cygwin.com/docs.html
>> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
>
>
>
>hmpalert.dll is a critical Dynamic Link Library file for Sophos Intercept X
>and HitmanPro.Alert, designed to protect systems by monitoring and blocking
>exploit techniques. It operates by injecting itself into running processes.
>It is often associated with system crashes (BSOD), application errors, or
>performance issues

Probably a successor to Sophos Anti-Virus 7, which is listed on the BLODA
(https://cygwin.com/acronyms/).


















































































-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple