DON';T USE LECTORA 18! Trojan:Win32/Azden.A!cl
February 6, 2019 12:00 AM
There's this Trojan that was found in the latest update for 18...
"Trojan:Win32/Azden.A!cl"
Hello, Thank you for contacting Trivantis Customer Solutions. We understand that you have encountered an issue with the most recent update to Microsoft Windows Defender quarantining one of Lectora’s application files, CefSubProcess.exe. This file is a valid Lectora file, and has been included since version 17.1. We are actively working with Microsoft to ensure that the file is no longer quarantined.
What the people at Lectora don't seem to know is that the second that a Trojan is discovered on our government computers, secret IT people drop from the ceiling (minutes after the Trojans are flagged) and take our computers and immediately format them. Yes, data is normally backed up, but do you know how long it takes to backup, delete, and re-image a computer? For us, like 24 hours. And then, do you know how long it takes to reinstall all of our programs? (Adobe CC2018, Cinema4D, all the friggin plugins and addins that we need to call or email to de-register, re-register, etc...) Another full day. We had our entire team (8 computers) confiscated yesterday to be wiped. We're out maybe 3 days of work on this.
Not happy with the QC at Trivantis. I'm sure they'll blame Microsoft for this, but I'm not seeing too many other companies having these issues.
Discussion (10)
Yes. I'm aware of the solution. Thank you. The issue is not the solution (although, I'm glad there is one.)- the issue is that Trivantis allowed this to happen in the first place. These Microsoft Defender changes don't just suddenly happen with no notifications to software manufacturers- or else, every time they updated, all software would suddenly throw these false flags. It seems like you folks have gotten lax over the years when it comes to QC.
Yup. We can't even reinstall Lectora according to our security team.
Okay... so I followed the instructions for the above file. It worked on one course, but I'm still getting a white screen during Run Mode and Preview Mode. Why would the solution work for one course, but not the other??
undefined
Hello Atlanta Joe,
We are very sorry to hear about the impact this issue has had to your team. We can understand how frustrating this is. This change in Microsoft Defender file criteria has affected both Lectora version 17 and 18, meaning files that have been in use for some time are now being flagged.
We have prepared the solution below and this will also be included in next version of Lectora 18.
Lectora version 18.0.2 will be available for download within the next week.
To resolve for Lectora 18.0.1 and below in the meantime, please use the following steps:
1) Please download the replacement file from here: https://trivantissupport.sharefile.com/d-s3c3bdae96a54926a
2) Close Lectora
3) Use File Explorer to navigate to your installed folder, similar to: C:\Program Files (x86)\Trivantis\Lectora Inspire 18
4) Copy the downloaded file to this folder.
5) Agree to replace if prompted.
6) Restart Lectora
We apologize for this inconvenience. Please let us know if you need additional assistance with this matter.
Sincerely,
Trivantis Customer Solutions
I have to agree with @joejubee on that. The same with the CKE-editor not working properly in Lectora Online in the latest version of Firefox. Im quite sure Firefox gives months upfront notice to developers they are making changes...so it is really lax from Trivantis developers side this slips in. More busy with tools like Centario i suspect.
I don't even run Windows Defender on my system... and my IT team turned my virus scanware off so I could possibly get some work done. Please let us know what we're supposed to do and why the solution fixed one course, but not another. I've tried restarting my system... but to no avail.
undefined
So I got off the phone with Cheryl (Trivantis)...she was extremely helpful and got the white screen issue resolved. I think the bug and new file affected something else which was also causing a white screen issue. You might want to reach out to their support team to troubleshoot. I had some java script added to an exit button. This was causing the issue.
Yup - just got my computer back... modified the file, but still get the white screen on preview. Is this just how it's going to be until 18.0.2 get released?
@Anne_Setter, you wrote, "You might want to reach out to their support team to troubleshoot." That might be possible except today customer service is offline. Not answering their phone, voicemail full, ignoring tickets.
Lectora Publisher and Lectora Inspire 18.0.2 are available for download. This version is a full install and resolves the quarantine issue.
The most recent update to Microsoft Windows Defender is quarantining one of Lectora’s application files, CefSubProcess.exe.
Affects Lectora Publisher and Lectora Inspire versions 17 and 18
Symptom of this issue is Run and Preview modes will display a blank white page.
The most recent update to Microsoft Windows Defender (released Feb 5, 2019) is quarantining one of Lectora’s application files, CefSubProcess.exe. This change in Microsoft Defender file criteria has affected both Lectora version 17 and 18, meaning files that have been in use for some time are now being flagged.
Please replace currently installed Lectora Publisher or Inspire version 18 installs with the updated version 18.0.2.
- Download Lectora Publisher or Inspire version 18.0.2 from our website here: https://www.trivantis.com/service-pack-downloads/
- Uninstall Lectora
- Locate the downloaded installation file.
- Begin installation by using the right mouse button to click on the installation file and selecting 'Run as Administrator'.
undefined
For Lectora Publisher or Inspire version 17, please use the following steps:
- Please download the replacement file from here: https://trivantissupport.sharefile.com/d-s3c3bdae96a54926a
- Close Lectora
- Use File Explorer to navigate to your installed folder, similar to: C: Program Files (x86) Trivantis Lectora Inspire 17 (or Lectora Publisher 17)
- Copy the downloaded file to this folder.
- Agree to replace if prompted.
- Restart Lectora
undefined
Discussions have been disabled for this post