Ledger-live-desktop: New App. Ledger Live Desktop Windows also contains the Trojan virus (Generic / Trojan.Downloader.251)

[a1exandrovm]

Ledger Live Version Ver. 2.0.1, Ver. 2.2.3 on

Windows 7 & Windows 10 64-bit

360 Total Security detects the virus (Generic / Trojan.Downloader.251) in the installation file from your official site. Ledger Live Desktop Ver. 2.0.1, Ver. 2.2.3

On three devices I checked the distribution from your official site, and on all three devices with the pre-installed 360Total Security antivirus, I got a warning.

Additionally, I rechecked your file through the VirusTotal.com and MetaDefender.opswat.com online virus scan service (attached screenshot). This service also gives a warning, referring to the engine Qihoo-360 by 360 Total Security. Let me remind you that the previous Ledger Live distribution was installed without problems and without warnings.

Please close this bug so that users can safely install the Ledger Live application update for Windows. After all, the installation package The distribution of the previous version was installed well, without threats to the operating system.

[a1exandrovm]

Your new Ledger-live-desktop-2.2.4 application also contains a virus

[sp1d3r]

It's a false-positive.

[a1exandrovm]

Это ложноположительный. @sp1d3r

Женя, да я понимаю, вопрос в другом. Это ведь серьёзный софт, могли бы доработать эту историю. Тем более в старых версиях таких ошибок нет. В конце концов другой упаковщик могут использовать. Ведь будут и другие пользователи, коллекционирующие криптовалюты на свой леджер )

[gre]

it was fixed if you Uninstall your version and reinstall 2.3.0.

Please see https://github.com/LedgerHQ/ledger-live-desktop/issues/2822

[a1exandrovm]

it was fixed if you Uninstall your version and reinstall 2.3.0.

Please see #2822

Sorry, @gre you're wrong.

The fact is that I have 3 laptops, and only one has the old version of Ledger Live Widows installed. By the way, it was installed without errors and additional warnings ...

Now, no matter on which laptop I am trying to download the distribution kit from the official Ledger site - My antivirus 360 Total Security displays a warning about the danger.

Including laptops on which Ledger products have never been installed before. Thus, it is impossible to remove and reinstall a non-existing program )

[sp1d3r]

I have a bit mixed feelings about it. You have the point indeed, and I fully support your concern @a1exandrovm, tho I would like to share the similar story, which ended up with fix from AV side:

In the past I had problems when Kaspersky detected my software (to be concrete, one of the dependencies which was to hard and costly to rebuild or rollback) as Trojan (tho other AV solutions didn't) - but after working with the lab directly (analyzing the binary and reviewing the source code), I was able to prove that their check had flaw and they decided to fix _their_ check - and detections had stopped after virus signature updates.

While it indeed the concerning thing and may be (I hope) fixed from Ledger side due to importance of the software (e.g. rolling back in case the root case of problem is in the dependency), giving that only 1/68 AV detected the issue, it likely the problem with AV check. AVs, even reputable, aren't ideal either (Microsoft already removed the false-positive detection rule which also detected trojan in the Ledger Uninstaller from their Defender product). I would ping also the 360 Total Security lab (like someone here pinged Microsoft) and try to trace the root cause of the issue - they may still use outdated signatures in their engine.

P.S. all above is just random thoughts, I'm not related to the Ledger devs and ended up in this thread occasionally while doing some research:)