On Tue, 2021-11-30 at 17:26 +0000, Joe Wilkinson wrote: > Hi Richard. > the file is gspawn-win32-helper.exe > My diagnosis is that when unzipping with Windows Extract, McAfee > kicks in and finds a problem with the recent versions of the file. > When I WindowsExtrtacted the Nov30 download (I usually use 7zip as it > is MUCH faster) I got an error message that I had been protected from > an (unspecified) file. And denemo provided me with the familiar > reports about Typesetting. > So I looked in the McAfee "History" and found that it didn't like > gspawn-win32-helper.exe and had protected me several times from it! > > The official Windows denemo 2.5 download, treated in the same way > did not upset McAfee. > So I tried copying gspawn-win32-helper.exe from the working version > into the bin folder of the faulty Nov30 and it just copied it in - no > messages. Trying to copy in a second version flagged up that there > was already a copy in bin. Therefore McAfee had registered it as > dangerous and simply not copied it over. And it has been deleted from > several of the other non-typesetting versions. > > My assumption is that using 7Zip skips past McAfee, BUT when I try > to run denemo McAfee kicks in and deletes the gspawn-win32-helper as > it is missing in all the versions that don't typeset. BUT the > deletion isn't reported. > SO there must be something different in the most recent versions
Indeed there is, because although compiled from the same source code the compiler is a more recent version and will generate different sequences of bytes, which give >150Mb of them results in accidental matches with virus "signatures". [...]I > have a work-round if I want a more up to date version than Oct > 30/Denemo 2.5 - just overwrite gspawn-win32-helper.exe. yes, or get a better virus checker - I notice that on installing the operating system from Microsoft directly it does its own checking (it says) and doesn't suggest installing third party software to check for viruses... Richard
