Yoga Book software update downloads possible infection [ Edited ]

[Puppy]

It is already discussed here. I downloaded both files yetiwdmm1671.exe and yetiwdds1669.exe from Lenovo Support and checked online via VirtusTotal. Both yeilds positive infection detected by multiple AV software.

https://www.virustotal.com/cs/file/a93b8be8f070b182e893b77afce71a5c2b5296313b94963de2b4276b06aa9f48/...

https://www.virustotal.com/cs/file/808ed674bb4276290a05f1c54bb1cbe4ca36f981dc72fe564ecd06add432181c/...

Moreover both executable files are not digitally signed by Lenovo !

It is also worth to note that these installation batch files inside the package are terrible scripts that can not work reliably. It looks like written by a non-professional person who is almost clueless in software industry.

[Blotha]

Hey, don't worry. The detection ratio is 4 / 56. Almost all reputable antivirus programs say it's okay.

[Bugbatter Community Moderator]

Yes, exactly. I'm seeing 2/56 though.

---

Blotha wrote:

Hey, don't worry. The detection ratio is 4 / 56. Almost all reputable antivirus programs say it's okay.

---

[Puppy]

---

Blotha wrote:

Hey, don't worry. The detection ratio is 4 / 56. Almost all reputable antivirus programs say it's okay.

---

No digital signature = no trust. It is also detected by Symantec. These files looks like a WinRar self-extractors, why ? Lenovo isn't capable to create standard MSI package and sign it ? Tools for this are free (Wix).

[Puppy]

Do you realize that default Windows Defender also detects these executable files as infected ? It is embarrassing and completely unnecessary if proper tools were used to create the software package.

[Blotha · Accepted solution]

Today I downloaded the above linked files (exe). Afterwards I scanned both with Windows Defender (default, right click). Result: Nothing was detected as malware on my device.

[Bugbatter Community Moderator]

Blotha, thank you for following up on this. Apparently, there has been an update in the virus detections.

[Puppy]

Lenovo has removed all Yoga Book Windows 10 updates from support page downloads. A good "solution" after all, that confirms there were issues.

[Andy_Lenovo]

Hello Puppy,

I can see how you arrived at that conclusion and how it would appear to be a logical one, however, that is definitely not the case. The drivers disappearing was first noted, to my knowledge, on 26th October and on questioning it turned out that, due to how Windows now handles updates, it was felt there was no need to have them on the web.  That said, I know that not seeing available downloads for their system may make some customers feel their system is not supported by Lenovo and, for that reason, I would also like to see their return.

[Puppy]

---

Andy_Lenovo wrote:

it turned out that, due to how Windows now handles updates, it was felt there was no need to have them on the web..

---

Sorry, I don't get it. What is the connection between installation of a custom software and Windows updates ? The only issue was these primitive update batch scripts were poorly written and that's why it had never worked.