PROBLEM: Avast anti-virus thinks LogosCEF.exe has an IDP.Generic virus
I can't tell you the version, because Avast has quarantined the executable, but I updated it today (21st May 2025)
Here's the report it provided. I'm running Windows 11.
Has anyone else encountered this?
Comments
-
Tell Avast to avoid checking the Logos folder (and get the exe out of quarantine). There is enough info on the web to suggest it is a false positive (behaving in a way Avast does not expect).
Dave
===Windows 11 & Android 13
1 -
OK, I've scanned with Malwarebytes and Clamscan (on Linux) and neither report a virus, so I've restored it and marked it as an exception.
But "enough info on the web" … a couple of examples would be good, because when I searched yesterday (admittedly not with Google), the newest information I had was from about 2015.
By contrast, today there is a report of 46 vulnerable parts of the code mapped to 31 attack techniques and 8 tactics, so the developers ought to close these loopholes before there is a real attack:
https://www.hybrid-analysis.com/sample/eec77c371a893ccc0e4206fc43459de4dc867d7a83fc9fc510cece424287a5ca/682e9130530e5a38d707ad00
Hamish
0 -
PS Sorry, I should have posted this to the Proclaim forum. As it was so low down on the list, I didn't notice there was such a thing.
0 -
Perhaps "vulnerabilities" is overstated. Reading that hybrid-analysis.com page again, I see that the word is "indicators". Nevertheless, the developers should still check that files loaded into Proclaim (or user input) are not able to manipulate API calls to cause undesirable behaviour.
0 -
The file is completely harmless:
Avast (and Hybrid Analysis) are overreacting.
We virus scan all Logos and Proclaim files for malware and then sign them with our digital certificate (so they can't be altered).
0
