4 replies to this topic

[dlampel]

I am posting this here, because I have not received a response after posting the problem at the Contact page at the e-Sword web site.

 

After installing the latest version of e-Sword (11.2.2) on my Windows 10 (64), Webroot SecureAnywhere reported that the e-Sword executable was infected with W32.Adware.Gen. I have never downloaded e-Sword from any source other than its web site, and when I downloaded a fresh copy from there yesterday, the same malware was reported.

 

I have never had any problems with this valuable resource before--not until v11.2.2. When I, as an experiment, ran the program anyway, the system seemed to be OK, but e-Sword behaved oddly: It would run, but suddenly disappear from memory after about a minute.

 

Can anyone recommend a source for a clean copy of e-Sword? Or where I could download an earlier version?

 

Thank you,

David S. Lampel

dlampel.com

 

[Katoog]

I typed "W32.Adware.Gen" with https://duckduckgo.com/

And the first hit is a false positive from Webroot SecureAnywhere!

 

https://community.we...-it/td-p/112714

You need to use a ticket to fix the problem.

 

Win32:Adware-gen is a heuristic detection used by antivirus software, designed to generically detect an adware program. This type of adware program shows ads as you browse the web.

 

Because Webroot SecureAnywhere has not placed the new edition of e-Sword (11.2.2) in the whitelist and heuristic detection is a problem for new programs that use Internet connection. (For the downloads and error logs).

[Josh Bond]

Katoog is correct. I've run into this several times before when releasing a new exe file (module installer, various utilities, etc.) Certain anti-virus/anti-malware are so aggressive, they flag an unknown (or unpopular) exe file. Since e-Sword is so widely used, this false positive will disappear as the anti-virus software sees more of this new version. (Interestingly, some of these anti-virus/anti-malware programs "phone home" quite a bit of information about you and your PC.) 

 

I don't care for programs that resort to this type of "detection" because they acknowledge they apparently cannot detect malware. Thus, they resort to simply comparing any program against their database of known programs, and then flagging any new program. This is less about malware detection and more about application whitelisting.

 

I once had a guy throw such a tantrum about the Module Installer being flagged as malware by one of the anti-malware programs, I went to the anti-malware's website and submitted a report for it being a false positive. They updated their software and the guy was happy. 

 

In web root's case, here's the link to submit a false positive report: https://mysupport.we...URCE=ENTERPRISE

[dlampel]

Thank you both for your input on this. I will try again with a fresh install--after telling Webroot to keep its hand off--because my work suffers when I haven't e-Sword as a study tool. And I will chalk up the odd behavior of the program disappearing from memory to the program being so utterly confused by all the uninstall/install/delete process.

[dlampel]

I believe I can confidently report that all is well. I deleted the program folder (after saving all my extra downloads to a separate folder), downloaded a fresh copy and installed. Everything is fine, and e-Sword is no longer disappearing from memory.

 

Thank you both for your assurance that there actually was no malware in e-Sword, and thank you, Rick, for an excellent study resource.

 

Dave

dlampel.com