Malware in my Logos Install?

This is the second time in the last few weeks Windows Defender has reported malware--the same one both times--in my LogosCEF.exe file:

This is on my tablet, not my main system. I've never had much problems with malware, and this device isn't exposed to much. I removed and reinstalled after the first detection, so I don't know how it is coming back. The system is connected to the internet but just visits a few specific websites, same as what I do on my desktop. I also haven't used anybody else flashdrives etc. on it.

Could this possibly be a false positive? I'd appreciate any advice anyone can give me on tracking down and eliminating the source of this problem. Thanks!

Find more posts tagged with

Comments

Paul

Its certainly possible it may be a false positive. I have a desktop PC running Windows 10 on which I use Logos 7. On this computer I regularly run both Norton 360 and the anti-malware software (Malwarebytes) and have never had a malware alert for Logos software.

Most people at some point have to decide whether their choice of protective software is sufficient for their needs. My preference is not to rely on Windows Defender, but others may have a different view.

One approach would be to scan your computer with a reputable anti-malware software just to be on the safe side. If after scanning it appears safe, then adjust Windows Defender to bypass that file. Under the security settings in Windows 10 (my assumption you may have this operating system), Defender has a facility to 'exclude' certain files from scanning. Hope that helps. Keep well Paul

Sean

https://community.logos.com/discussion/comment/855883#Comment_855883

Yeah, one thing I forgot to mention is that after this happened both times, I ran Malwarebytes and it didn't find anything more--but Windows has already quarantined the LogosCEF file.

That's one of the things that makes me think it's a false positive--doesn't malware usually infect more than just one file? Why would it pick this particular one both times rather than a more basic system file? I'd like to know for sure, though, before I tell it to ignore. (ETA: but then again, if a false positive, why doesn't the desktop with the same setup also flag it?)

And yes, I'm running Logos 7 on Windows 10.

Paul

https://community.logos.com/discussion/comment/855884#Comment_855884

I agree you would normally see more than one file identified as malware. Its significant that Windows Defender regarded it as malware, but Malwarebytes did not. Although I tend to have more faith in Malwarebytes, I'm still cautious regarding scanning software. If I were you, I would ask Malwarebytes Support whether they have ever had a problem with files from Logos Software being identified as malware - and specifically the file you have identified ( https://support.malwarebytes.com/?b_id=6400 ). Microsoft also has a malware portal that not only has further information, but allows you to make a submission regarding a file:https://www.microsoft.com/en-us/security/portal/submission/submit.aspx. These may be ways of checking the experience of those companies before telling Defender to ignore the file. Keep well Paul

Sean

https://community.logos.com/discussion/comment/855889#Comment_855889

Thanks for the links. I uploaded to Microsoft, nothing detected in it. I am copying the LogosCEF file from my desktop to my tablet as a replacement, will monitor to see if it gets flagged again.

The strange thing in comparing the two files: the ok one is 427KB, the one report as infected is 305KB, otherwise the time stamp is the same. If it were infected I'd think it'd be larger than the original--unless Defender sliced part of it off.

Any further insight anyone can give is quite welcome.

Robert M. Warren

Microsoft has been generally given over to hysteria. I'm to the point where "(not recommended)" really means "(if you're going to do real work, you'll do this)".