Re: Windows defender marking NVDA a trojan


David Goldfield
 

Zahra,

There is always a risk that antimalware programs may accidentally remove an important program or a component of a program because it could mistakenly conclude that the program in question is malware. It has happened and there have been occasions where a program or other component of a screen reader was mistakenly flagged as a virus. However, this type of occurrence, while extremely inconvenient when it happens, is also extremely rare. I've been using computers running Windows since 1994 and have used a variety of antivirus programs during that time and I have never had my screen reader flagged as a virus or trojan. Yes, it can happen but the risk of this happening is low. However, if you plan on using a computer for anything more than writing simple documents trust me when I say that having a good antimalware solution running on your computer is absolutely essential and the benefits far outweigh these small risks. A doctor may mistakenly diagnose your cold symptoms for a more serious condition but the benefits of regularly seeing a physician far outweigh such risks. Windows Defender is now a very good security program. I would encourage you to just enjoy using your computer and to know that, if such a false positive does occur, the developer of that piece of software will do everything to ensure that their software is no longer flagged as a virus as soon as the antimalware vendor can be shown that a mistake has been made.


David Goldfield,
Blindness Assistive Technology Specialist
JAWS Certified, 2019

WWW.DavidGoldfield.org

On 2/8/2020 1:18 AM, zahra wrote:
Shaun,
did i understand it correctly?
i think that antivirus programs especially microsoft products,
scan the entire system and maybe remove our necessary and important
files even maybe nvda or even other files including html, docx, audio
and video files?
i remember that in one of the iranian websites,
someone recorded a tutorial which explained how to exclude our desired
folders from scanning by deffender.
his tutorial was for windows ten.
does windows deffender on windows 8 and 8.1 does the same things, and
it may removes our essential and important files without worning or
informing us about this matter?

On 2/8/20, Shaun Everiss <@smeveriss> wrote:
Yeah some of that software uses autoit and that is known to make viruses.

At any rate its clunkey and slow as a language so I wouldn't bother
using programs written in it but you should be able to exclude things.

Yeah when microsoft security etc cleans things it turns user account
control on at 33% by default.



On 8/02/2020 3:41 am, Ron Canazzi wrote:
Hi Quenton,

In addition, I always have Defender set to update to the latest
version. I have had odd issues with it in the past. If you are
familiar with Steve's Clock, Defender flagged that consistently. Even
after I allowed it under Defender settings, every time Windows
updates, it flags it again. I had to go into the settings and
manually exempt the Steve's clock folder from Defender scans. Even
then, it always brings up User Account Control when I run it. It
never comes up in start up--even though I have it set to run at start
up. I have reported this to both the program developer and Microsoft
with no change. I am glad that this isn't happening with NVDA on my
system.


On 2/7/2020 1:00 AM, Quentin Christensen wrote:
I believe this only affects Windows 10 at this stage? Perhaps
Rosemarie and Ron are using Windows 7? Or their Defender hasn't
updated to the latest definitions maybe?

On Fri, Feb 7, 2020 at 4:30 PM Ron Canazzi <aa2vm@...
<mailto:aa2vm@...>> wrote:

Hi Group,

I also do not have this issue with RC3.


On 2/7/2020 12:28 AM, Rosemarie Chavarria wrote:
Hi, Quentin,

I'm not having this problem on my system. I'm using espeak but I
wonder if I should use something else just to be on the safe side.

Rosemarie

*From:*nvda@nvda.groups.io <mailto:nvda@nvda.groups.io>
[mailto:nvda@nvda.groups.io] *On Behalf Of *Quentin Christensen
*Sent:* Thursday, February 6, 2020 8:14 PM
*To:* nvda@nvda.groups.io <mailto:nvda@nvda.groups.io>
*Subject:* [nvda] Windows defender marking NVDA a trojan

Hi folks,

It was NVDARemote the other week, now it seems it's our turn for
Microsoft's random unfounded accusations. If you try to install
the release candidate of NVDA 2019.3, Windows Defender will
alert you it has found a trojan in eSpeak NG and blocked it.
The install of NVDA will fail.

As a workaround for now, you can create a portable copy of the
RC and that should run fine. You won't be able to use eSpeak NG.

NVDA 2019.2.1 installs and runs fine, even using eSpeak NG (it
uses a different build of eSpeak NG).

I am not sure whether this affects Windows 7 users as well. I
have reported it to Microsoft but I would encourage everyone
else to as well. To be honest, even aside from it being our
program affected, this really annoys me. Defender has NOT found
a trojan in eSpeak, its heuristic (machine learning) has guessed
that it looks a bit suspicious and flagged it - Ok that happens,
but say that, don't say absolutely that a known malicious
software has been found.

It took a day or so to fix Defender's virus list and have
NVDARemote cleared, so I expect it will probably be within about
the same timeline this time around. Apologies for the
inconvenience.

--

Quentin Christensen
Training and Support Manager

NVDA 2019.3 rc2 now available for testing:

https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nvaccess.org%2Fpost%2Fnvda-2019-3rc2-now-available-for-testing%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077639371&amp;sdata=hkjrdZkPgVfA2LHS9r4xwmyXoTAyQiai1MivB5AUytc%3D&amp;reserved=0

Web: https://nam12.safelinks.protection.outlook.com/?url=www.nvaccess.org&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077639371&amp;sdata=KwCii1AmrmaxYNmz03BKZ1VBQyKJYnS30TXmDu%2B7NjY%3D&amp;reserved=0 <https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.nvaccess.org%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077639371&amp;sdata=omVhOia%2BBqT7WRpDBQVLce7XtkYcAkfLPkHLwovquFI%3D&amp;reserved=0>

Training: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nvaccess.org%2Fshop%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077639371&amp;sdata=wuYkeIdxLdgjREfjL7%2FWmbWGeQ%2FTw937qSkbtzfay%2BY%3D&amp;reserved=0

Certification: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcertification.nvaccess.org%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077639371&amp;sdata=zuz2DcIzQHgTeGgj8zKiJo%2FIqZriwT3644e3sY53bRM%3D&amp;reserved=0

User group: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnvda.groups.io%2Fg%2Fnvda&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077639371&amp;sdata=j8c0iRm6d0u2rL9Gn0kyA0feH2JoyDH4bmEFY4N9E5I%3D&amp;reserved=0

Facebook: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.facebook.com%2FNVAccess&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=AQq9TOCa8GZGV70dCYWEG7zqM%2BAbj%2B2JuYcqRVDPcWM%3D&amp;reserved=0
Twitter: @NVAccess <https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FNVAccess&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=JIlht%2FcLkUzOCA%2B%2BQgIhfRhLqR442W1IoPIQRCulsnQ%3D&amp;reserved=0>
--
They Ask Me If I'm Happy; I say Yes.
They ask: "How Happy are You?"
I Say: "I'm as happy as a stow away chimpanzee on a banana boat!"



--
Quentin Christensen
Training and Support Manager

NVDA 2019.3 rc2 now available for testing:
https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nvaccess.org%2Fpost%2Fnvda-2019-3rc2-now-available-for-testing%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=PxPAcRh7kNg01YLd4zgUXqewkmkL%2FJ6pXBLje1DwbUs%3D&amp;reserved=0

Web: https://nam12.safelinks.protection.outlook.com/?url=www.nvaccess.org&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=Wdwpy%2BAt0corQihnH9Y5uGZTHTkz3ag3GU0gitRUR6w%3D&amp;reserved=0 <https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.nvaccess.org%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=gMIt%2BRYVkHeFE6%2BOmWn%2FxL6yiLehK%2Bc9xNaPPduMo4o%3D&amp;reserved=0>
Training: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nvaccess.org%2Fshop%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=ezv4NUSx0VmiGzWCwbBNQFaWnEwgJUBEcKCncL1HMXo%3D&amp;reserved=0
Certification: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcertification.nvaccess.org%2F&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=o8eolpoNDethwRAOmQSFMtYwvsR0uEvio5h8NdEoHS0%3D&amp;reserved=0
User group: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnvda.groups.io%2Fg%2Fnvda&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=r5M%2FFfUs%2Bf0BF7%2FZSJqpae6IdMHuN430pN0TZWZtMfk%3D&amp;reserved=0
Facebook: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.facebook.com%2FNVAccess&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=AQq9TOCa8GZGV70dCYWEG7zqM%2BAbj%2B2JuYcqRVDPcWM%3D&amp;reserved=0
Twitter: @NVAccess <https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FNVAccess&amp;data=02%7C01%7C%7C2ae427dfc8ba4df896fb08d7ac5eb5dd%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637167395077649366&amp;sdata=JIlht%2FcLkUzOCA%2B%2BQgIhfRhLqR442W1IoPIQRCulsnQ%3D&amp;reserved=0>
--
They Ask Me If I'm Happy; I say Yes.
They ask: "How Happy are You?"
I Say: "I'm as happy as a stow away chimpanzee on a banana boat!"

Join nvda@nvda.groups.io to automatically receive all group messages.