Anti-Virus, App, & Browser Control false alarms

[JG]

Good idea to use VirusTotal.com

So flagged as bad by 2 out of about 70 virus scanners.
We have not had any reports recently about the downloads causing problems....

[onepeaceonegod]

Sometimes Norton swears, but I have him in a paranoid mode, so I no longer pay attention.

[DZ]

I installed the software and both my antivirus flagged the registry keys so I went to run it through a check, you can see the results here: https://www.hybrid-analysis.com/sample/ ... mentId=140

Malwarebytes has flagged registry keys & a file as a trogan

[JG]

I checked the main install file SHA256 checksums and they were ok. So no changes to the files since 24/8/2023

[FollowsTheWay146]

I recently upgraded my Word software from 5.x to 6.x and my Webroot SecureAnywhere antivirus software flagged/deleted the Word upgrade exe that I downloaded.

I had to turn off Webroot in order to upgrade my Word.

[Phil459]

I've been using TheWord a long time with no security warnings at all until this morning. Windows Security quarantined "Win32/Wacatac.B!ml" as a Trojan and a severe threat. It says the containerfile is: J:\Portables\TheWord\theword.exe, and the file is: J:\Portables\TheWord\theword.exe->[RSRCEmb]#2.

I checked VirusTotal and it didn't find that threat, but it flagged "Malware.kb.a.974."

Do you know if either of these are threats I should be concerned about? Thanks.

[JG]

Well if they cannot agree on what the virus might be, and you have not installed a new version of theWord, then it is just a false positive.

[Phil459]

Well if they cannot agree on what the virus might be, and you have not installed a new version of theWord, then it is just a false positive.

Okay, thanks.

I believe you're right. I tried a fresh install and Windows Security hit on the same thing again. Actually, Edge complains about even downloading TheWord; and Windows complains when I try to install it. Sounds like Microsoft problem.

[AlexAlves]

Hello, I've been using theword for long years never had any problems. This morning the Windows defender flagged the program of agressive virus and uninstalled it. I can't install the latest version. Please help me, I need the program, because I use it in the church weekend services. God Bless

[Bama29]

I have the same symptoms on my machine this morning. When I went to launch theWord for my morning reading I had the pop-up warning that a Trojan had been detected. I have used theWord for years and have not recently updated the program. Unfortunately the program is no longer available for use.

[jonathangkoehn]

This is due to Microsoft probably the recent update. An immediate solution is to turn off Realtime protection in Microsoft Defender.

Also submit to Microsoft that the file is ok. There is a link in Microsoft Defender to submit that it is ok.

You can also use this link directly to submit that the file is good the more that do this the better!:
https://www.microsoft.com/en-us/wdsi/filesubmission

[FollowsTheWay146]

I just got zapped by "Google Safe Browsing" (cough) from within Firefox trying to access a file on TheWord.net.

It happened when I clicked on a link within the latest Word email newsletter (rec'd 5-12-2025).

The link was:

https://www.theword.net/bin/get.php/the ... er.gbk.exe

I have attached a screen grab of the problem.

I clicked "ignore the risk" and it did give me a chance to report the site to Google as SAFE; which I did.

Then I got through, but the link failed (file not found). A separate issue I suppose.

Anyway, just reporting it in case it helps in some way.

[ATTACHMENT]

[jonathangkoehn]

Thanks I'll have to look into the link. By the way please get it through the word > Add Titles > Official Repository (this is the recommended method). Can you give a screenshot of the specific link you tried.

[FollowsTheWay146]

Here you go. Thanks for the help.