Topic: Ledger Live 2.1.0, 2.2.0, 2.2.3 Installers and Uninstallers flagged as Malware (Read 1208 times)

That was exactly my first thought. I even started "freezing" UTXOs, one by one, to check.



Thanks, will wait for 4.0.0, hope Electrum team get that issue under control. As long as I use a few different wallets to  distribute risks, my bitcoins are spendable at any time, I don’t worry about it.

Look as though  I came across one more  puzzle. After upgrading Bitcoin app to 1.4.2 I have got from Ledger (connected to Electrum)  the strange messages at sending BTC  - "Unverified inputs" followed by "Update Ledger Live". Luckily I was advised by Igor72 (Russian pro in both Electrum and Ledger) to  overlook  those messages as the current Electrum version is still not accommodated to  1.4.2 bitcoin app. Hope his advice could be useful to someone else.

Thanks, I've missed that. Installed 2.5.0 LL on both of my computers, one of them is under Win10 (1909) the other is running by Win 10 (2004). Now on both computers LL runs without any glitch. Just as I thought, the problem was on their part, not mine. I  changed nothing in my OS nor ntdll.dll or other thing,  but the  newest  LL works as it should be, yay.

Downloaded directly from their official github account but so much puzzles  for me from Ledger Live team. Why they don't provide the signature to releases? IDK, what to believe any longer.





I don’t believe this is about AV 'cause it has been so smooth with previous versions.

Yeah... I got the same message while playing around with Ledger Nano S and Bitcoin Core/HWI...

I thought it might have been because the UTXOs I was spending were "unconfirmed", but I was advised by achow101 that it's related to the hardware wallet/SegWit flaw that was announced recently.


It's been patched, so if you download and run from source, it'll most likely work without issue... they just haven't released 4.0.0 as yet... fingers crossed it's not too far away

No problem, I'm glad you can use Ledger Live again

I'm not competent to say exactly where the problem was with the previous version and with some other versions, but the fact is that there is something different in your OS or maybe even the hardware that was causing the problem. I don't think it's easy to make 100% compatible software, because there is always a small percentage of those who will have a problem for some reason. However, two things are important in this case, you can always go back to the previous version and Ledger makes a fix relatively quickly.

Captain-Cryptory, ZoneAlarm is detected Ledger Live as trojan even in previous versions, check my post here. There is no doubt that this is a false positive detection, you don't have to worry too much about that. After all, fake Ledger Live can try to steal your coins by convincing you to type your seed or if it contains clipboard malware that would replace your legitimate address.

The first attempt can be avoided only by using common sense, and for the second, the Nano S itself will definitely help by forcing you to check is your sending address match on Ledger Live and on device screen.

Yeah... no issues from my side here... Windows Defender didn't complain about anything. 2.5.0 downloaded through Ledger Live and installed without issue. Everything seems to be running OK.

Seems the "big" feature in this new release was the ability to buy crypto from within LL.

The windows releases are signed.
You'll get a popup when trying to install a program in windows asking whether you want to execute it. This popup shows you who signed the executable.

Also the one and only detection is from an unknown AV software.
The heuristics which triggered the alarm was apparently the download within the executable.
That's not surprising since ledger live is downloading new updates itself.

Version 2.5.0 is out now, maybe you will have more luck with it.
Just leaving this here regarding the ntdll.dll file. Maybe your AV corrupted it or something else. 

https://www.computerhope.com/issues/ch000960.htm

maybe, you have to update windows system.

or reinstall ntdll.dll (I am not sure about this)

(uninstall the file)

(reinstall the file).

https://answers.microsoft.com/en-us/windows/forum/all/app-crash-with-ntdlldll/9aa59f80-99a1-4f3c-b2f0-7eb72df05b2a

https://answers.microsoft.com/en-us/windows/forum/all/faulting-module-name-ntdlldll/82a80b07-6d81-40f7-8aa6-b11f00098480

@Captain-Cryptory, just out of curiosity, have you tried looking in the Windows Error Log to see what errors, if any, are reported when you attempt to run Ledger Live and it crashes?

To find the error logs, start "Event Viewer"... and then look in "Windows Logs -> Application". You might need to search through a few warnings/errors from various services... but hopefully near the top you'll find one that has the "Source" value of Ledger Live or similar.

It might give some clue as to why LL keeps crashing for you.

I am using the same version on the PC where I have Ledger Live installed. I updated to the newest version the other day and everything is fine on my end. These Ledger bugs are becoming more and more mysterious by the day.

This is really strange, it would be interesting to find out what is causing the problem. I haven't updated yet, but I'm sure I have version 2+ which I installed as a fresh copy (no update) so I didn't have any problems. What you can try (if you have the will and time) is to delete its folder after uninstalling LL, it is possible that old and new files create a problem.

I also reviewed Ledger Reddit, and as far as I can see there are no complaints about the new version.

(Un)Fortunately, I have not been able to replicate this issue... 

Just downloaded and installed the 2.4.1 update (from within Ledger Live)... then did the auto coin app update (as suggested by the release notes) through the manager. Everything seems to be running fine.

For the record I'm using:
Edition: Windows 10 Pro
Version: 1909
OS build: 18363.836

Mind you, I have a lot of the VC++ redist packages already installed due to the requirements of other apps that I have running. It's a shame that so many users are having issues... the new versions of LL are a decent improvement in my opinion

Can you clarify how you were forced to make the update? It start automatic when you open Ledger Live, or you did it manually because you were worried about a possible security issue?

I know some users have also had problems updating to Ledger Live 2+ versions on W10, but I also know that Ledger is allegedly fixed that in new versions. Ledger also suggests a possible solution for W10 users, try to install Microsoft Visual C++ redistributable package following steps at this link.

Ledger Live crashes after update

I remember reading your comments a few weeks ago. This is a somewhat different issue because I had no problems running the app, it's the updating to the newest version that is the issue here.

Yes, Windows 10.

No, I did not do that. The problem was resolved today. I tried it one more time and it worked just fine. Probably some congestion on the servers, just like you said. The same thing you described with the download percentages jumping up and down happened to me. The app was jumping between 3 different percentages.

Case Closed!

Yep, at first it appeared that the "download now" link was completely non-functional... and I'm on an Ethernet connection. Then, out of nowhere, it starts "downloading update" with the % counter jumping all over the place. I suspect because I had clicked it "several" times  so it was downloaded several copies!

Eventually, one of them got to 100% and finally "install now"... unfortunately, before I could click it, one of the other "many clicks" must have finally registered and it started downloading AGAIN (with % jumping around again)! It then ended up in the "Downloaded 100%" state.

So, I shut down and re-opened Ledger Live, then clicked the "Download Now" link ONCE... and left it. After a short delay, it whizzed through the download and ended up in "Install Now". Clicking "Install Now" and it updated without any further issues:




I presume with all the craziness of late, that the Ledger servers are once again taking a complete hammering And that there is quite some latency between pushing the "download" button and the request being served. Which of course then leads users to click the link a couple more times to make sure they did actually click it... and I believe it is the multiple downloads being triggered that then eventually causes some sort of locking/blocking and the "Downloaded 100%" and the inability to get to the "install now" link.

Have you tried to clear the "Ledger Live" updater "cache"? It's in: C:\Users\YOURUSERNAME\AppData\Local\ledger-live-desktop-updater (Note that it's in "Local" and not "Roaming".)

In any case, it seems a minor UI change here where it immediately changes to a "downloading..." label after you click it once could help prevent this situation. Possibly something they might want to integrate to prevent users getting stuck while trying to update.


Just because I can understand why certain commercial decisions may be made, that doesn't necessarily mean I agree with those decisions, nor does it mean I am going to defend everything they do. Maybe leave your smart arse comments at home next time? "lol"


And if you desperately need/want to update and the built in update isn't working out: https://github.com/LedgerHQ/ledger-live-desktop/releases

I didn't use ledger live for quite some time now, but decided to start it up.
Update from version 1.20 to the latest went without any problem for me (linux).

What OS are you using? Windows 10 ?

Yep, I haven't been able to update to a recent version (I don't remember the version it was but I'm talking about the update released 1 month ago or more?) Not even able to start the software properly without error codes.

I talked about it on another topic here and look like I wasn't the only one. I didn't manage to find a solution so I gave up. I'm using a version from December 2019 downloaded from Github.

But HCP will surely say there is no need to moan

I have to go a little off-topic in my own thread. Better than creating a brand new one just to ask a question.

Has anyone experienced any problems updating their Ledger Live to the newest version (2.3.2, I think)? For some reason it just wont update on my end. For a couple of days I wasn't even able to initiate the download process. Clicking on the download button in Ledger Live didn't do anything. Over WIFI I couldn't do it.

Last night, I connected my laptop to cable and the download started but took half an hour to download. My connection and speed are fine BTW. After that the notification stayed at 'Downloaded 100%' for an hour.

I got fed up so I restarted the app to try again. The exact same thing happened for an even longer period of time.
Has anyone had a similar experience with this release or one of the older ones?

I think it is a "False Positive" from a certain antivirus against the Ledger Live application - in this case, Windows Defender.
Previously when I want to update Bitcoin Core, Bitdefender detected Bitcoin-Qt (download from the official site) as a threat.
https://bitcointalksearch.org/topic/m.53500127

There was never a problem with Bitdefender. Windows Defender was flagging the files for some time but that has been fixed from what I can see. ZoneAlarm was also flagging the installer as a "trojan downloader" and that seems to have been resolved as well.
There is still 1 security software that detects the installer but it's relatively unknown and I can't remember its name from the top of my head.

I am a Ledger Nano X user and currently use Ledger Live Mac version 2.2.4, and Android version 2.2.0.
All of these devices have Bitdefender Antivirus installed.
During this time, Ledger Live has no problems with the antivirus that I use.

In all honestly, I haven't had many problems with Ledger Live. I hope it stays that way. I prefer using Electrum with my Bitcoins and Nano S anyway so I can't complain about missing features. They do what they think is important, probably based on the needs the community expresses.

I am not sure what has caused all those bugs from the past. Hardware, software, or a combination of both. I doubt Ledger knows what has caused bootloader issues, Ledger Live not being able to load, etc.

Looks like that false positive alarm was fixed by ZoneAlarm. The 2.2.4 version is now only being detected by 2.2.4 as a Trojan Downloader.
 

I'm sorry, but moaning about a false positive generated by another application that a developer has no control over is ridiculous.

That isn't a "bug" or "poor coding"... that is Windows Defender being overly aggressive. Sure, it's not a good look for new users getting strange alerts from their AntiVirus/AntiMalware software when they're supposedly installing "legit" software... but a LOT of software has fallen victim to that sort of overzealous behaviour and NOT just in the cryptosphere.

I have had Windows Defender "quarantine" a lot of things in an effort to "halp" protect me from the "BadPeople"™

And it's even worse in Windows 10 now because I cannot actually permanently turn off the "Real Time Protection" anymore...


At least they were actively trying to fix it once it was reported.


Now, I do agree that Ledger haven't been great in a lot of areas... support timeframes would probably top that list, but their apparent focus on adding shitcoins in favour of fixing other issues is definitely in there too.

However, I can understand why they do this... think about it... what is more likely going to sell a HW to the "AverageUser"™? The ability for them to use all their favourite shitcoins with a fancy UI... or the fact that Ledger have a 100% bulletproof and error free firmware upgrade system, or that the "MasterPublicKey" shown for SegWit wallet is actually shown correctly as a "zpub" instead of an "xpub"?

I agree with him honestly, I even regret the Chrome App we used to use before. Using Ledger Live is like running the unstable or testing versions of Debian sometimes.

Why put the roof on the house if you haven't finished the walls? Instead to add stupid coins that nobody uses except the bots on the exchanges they should focus to make their product correct instead of throwing updates here and there that don't matter.

Thanks.
I will wait for next 'surprise' from Ledger, and open my own topic where we can chat more.
Cheers

Yes, it is open source: https://github.com/LedgerHQ/ledger-live-desktop



Probably as much as people want them to.
People want worthless shitcoins to be added, and they follow. Especially since developer create their application on their own and it only needs a security review from ledger.



Excuse me?
I only hear people crying who got their web wallet created by someone else and now lost x $.

I'd rather hear people crying because of some stupid bugs in a software you don't even need to use on a daily basis, than scams going on.

Is there open source code for their disaster buggy Ledger Live software, or should I think about that also?
How many more shitcoins are they going to add?
I would like to hear some insider information.

Step out and hear the cries of new people who are using Ledger wallet.



Sure, I will think about creating something like that.
Don't get me wrong, I also have Ledger wallet myself, but it's not a holly grail.

Ledger decided to create a hardware wallet resistant against physical attacks by using hardware / firmware which is under NDA and can't be open sourced.
They are using a secure element.

The non secure MCU is completely open source (comparable to trezor) but not resilient against physical attacks (comparable to trezor). Thats what the (closed source) secure chip is for.

Think about that.

I am aware that different people have different problems when it comes to the same software, but as good as some software may be, it may not work exactly the same on different configurations and operating systems. I see many people complain about Windows 7 and Ledger Live, but that OS is not supported more than a year, and I see a lot of people download fake Ledger Live and type their seed - and everyone blames Ledger for it.

I bought a hardware wallet for the sake of protecting my private keys, and it works flawlessly for now. I also do not live in the misconception that Ledger has made the ultimate security device, and I'm aware it's not open source - but they have built their reputation over the past 4 years.

This is a topic about Ledger Live false positive detected by Windows Defender (and as I show ZoneAlarm), so maybe you should open new one and post all other issues. Before that you can visit Ledger and Trezor Reddit, and you will see that there is not much difference in the problems that users have, even though Trezor is open source.

I know, and I don't expect to see any perfect hardware wallet.
But Ledger is NOT open source, and this false positive is not the only issue they have.
Think about that.

False positive is something which happens constantly, why does anyone think Ledger Live is immune to it? I personally have not had any problems with Ledger Live, and I use Nano S and Nano X on Windows 10. In this particular case, the only culprit is Windows Defender, which detects Ledger Live as something malicious.

New 2.2.4 Ledger Live for Windows is also detected by ZoneAlarm as HEUR:Trojan-Downloader.Script.Generic, same as it detect 2.2.0 version.


Freedom of choice is available to everyone, Ledger is not the only choice, but don't be fooled that there is something perfect, because you certainly won't find it. Do you know that Electrum also has a lot of false positive detections? Just a quick search can find dozens of cases on the forum...

https://bitcointalksearch.org/topic/electrum-301-setupexe-false-positive-2367499
https://bitcointalksearch.org/topic/avast-malware-warning-electrum-332-maybe-false-warning-5090850
https://bitcointalksearch.org/topic/false-positives-in-latest-wallet-3117187
https://bitcointalksearch.org/topic/electrum-wallet-virus-2575927
https://bitcointalksearch.org/topic/windows-security-reports-electrum-installer-infected-5107585

Imagine you are crypto newbie, and you just purchased Ledger hardware wallet.
Then you have bunch of stupid bugs for every damn update in recent weeks/months.
Oh, and this is not a theory, people actually complain all the time, so I will not close my eyes about this, sorry.

I find this a bit unfair. The device is still OK.
I've used Ledger Live only for install/uninstall things. I'm too used to Electrum to drop it.
Other wallets (MEW, for example) also work fine with Ledger.

So I'd only drop Ledger Live as a wallet. (Well, I don't even have to.)



Indeed Comodo Internet Security never complained.

All this with Ledger update bugs is becoming more and more serious.
Like I said many times....they should focus more on fixing issues instead of adding support for bunch of shitcoins.
Maybe it's time to move to some better HW.
Meanwhile people can use Electrum + Ledger

I didn't notice anyone talk about it in this part of the forum. The issue was brought up in the Croatian local section by slackovic (https://bitcointalksearch.org/topic/m.54231714)

The Ledger Live 2.1.0 update gets flagged and blocked by the Windows Defender as a Malware. Ledger issued two quick updates with 2.2.0 and 2.2.3 but they were not able to resolve the problems. This issue was brought to their attention on their GitHub > https://github.com/LedgerHQ/ledger-live-desktop/issues/2822.

The team has now released 2.2.4 that should rectify the Windows Defender flag. They recommend that anyone who has updated their Ledger Live to 2.1.0, 2.2.0, 2.2.3 first uninstall the software before installing the new 2.2.4 release. There is a separate uninstaller available on the link above.

Apparently this problem was/is only present on devices where Windows Defender is active.