Ledger Live 2.1.0, 2.2.0, 2.2.3 Installers and Uninstallers flagged as Malware

[HCP]

Has anyone experienced any problems updating their Ledger Live to the newest version (2.3.2, I think)? For some reason it just wont update on my end. For a couple of days I wasn't even able to initiate the download process. Clicking on the download button in Ledger Live didn't do anything. Over WIFI I couldn't do it.

Yep, at first it appeared that the "download now" link was completely non-functional... and I'm on an Ethernet connection. Then, out of nowhere, it starts "downloading update" with the % counter jumping all over the place. I suspect because I had clicked it "several" times  so it was downloaded several copies!

Eventually, one of them got to 100% and finally "install now"... unfortunately, before I could click it, one of the other "many clicks" must have finally registered and it started downloading AGAIN (with % jumping around again)! It then ended up in the "Downloaded 100%" state.

So, I shut down and re-opened Ledger Live, then clicked the "Download Now" link ONCE... and left it. After a short delay, it whizzed through the download and ended up in "Install Now". Clicking "Install Now" and it updated without any further issues:




I presume with all the craziness of late, that the Ledger servers are once again taking a complete hammering And that there is quite some latency between pushing the "download" button and the request being served. Which of course then leads users to click the link a couple more times to make sure they did actually click it... and I believe it is the multiple downloads being triggered that then eventually causes some sort of locking/blocking and the "Downloaded 100%" and the inability to get to the "install now" link.

Have you tried to clear the "Ledger Live" updater "cache"? It's in: C:\Users\YOURUSERNAME\AppData\Local\ledger-live-desktop-updater (Note that it's in "Local" and not "Roaming".)

In any case, it seems a minor UI change here where it immediately changes to a "downloading..." label after you click it once could help prevent this situation. Possibly something they might want to integrate to prevent users getting stuck while trying to update.

But HCP will surely say there is no need to moan

Just because I can understand why certain commercial decisions may be made, that doesn't necessarily mean I agree with those decisions, nor does it mean I am going to defend everything they do. Maybe leave your smart arse comments at home next time? "lol" <insert emote here to make ad hominem attack "OK">


And if you desperately need/want to update and the built in update isn't working out: https://github.com/LedgerHQ/ledger-live-desktop/releases

[1715182966]

1715182966

[1715182966]

1715182966

[Pmalek]

Snip

I remember reading your comments a few weeks ago. This is a somewhat different issue because I had no problems running the app, it's the updating to the newest version that is the issue here.

What OS are you using? Windows 10 ?

Yes, Windows 10.

Have you tried to clear the "Ledger Live" updater "cache"? It's in: C:\Users\YOURUSERNAME\AppData\Local\ledger-live-desktop-updater (Note that it's in "Local" and not "Roaming".)

No, I did not do that. The problem was resolved today. I tried it one more time and it worked just fine. Probably some congestion on the servers, just like you said. The same thing you described with the download percentages jumping up and down happened to me. The app was jumping between 3 different percentages.

Case Closed!

[Lucius]

I have been forced to update my Ledger Live 1.20.0 (which was working perfectly on win 10, 1909) to the newest 2.4.1 release  but after  launching the upgraded  software has refused to start and Windows has indicated that there is some problem with it.

Can you clarify how you were forced to make the update? It start automatic when you open Ledger Live, or you did it manually because you were worried about a possible security issue?

I know some users have also had problems updating to Ledger Live 2+ versions on W10, but I also know that Ledger is allegedly fixed that in new versions. Ledger also suggests a possible solution for W10 users, try to install Microsoft Visual C++ redistributable package following steps at this link.

Ledger Live crashes after update

[HCP]

(Un)Fortunately, I have not been able to replicate this issue... 

Just downloaded and installed the 2.4.1 update (from within Ledger Live)... then did the auto coin app update (as suggested by the release notes) through the manager. Everything seems to be running fine.

For the record I'm using:
Edition: Windows 10 Pro
Version: 1909
OS build: 18363.836

Mind you, I have a lot of the VC++ redist packages already installed due to the requirements of other apps that I have running. It's a shame that so many users are having issues... the new versions of LL are a decent improvement in my opinion

[Lucius]

I have checked on three computers. All the three are not friendly to 2.4.1,  the same cannot be said for  2.3.2

This is really strange, it would be interesting to find out what is causing the problem. I haven't updated yet, but I'm sure I have version 2+ which I installed as a fresh copy (no update) so I didn't have any problems. What you can try (if you have the will and time) is to delete its folder after uninstalling LL, it is possible that old and new files create a problem.

I also reviewed Ledger Reddit, and as far as I can see there are no complaints about the new version.

[Pmalek]

For the record I'm using:
Edition: Windows 10 Pro
Version: 1909
OS build: 18363.836

I am using the same version on the PC where I have Ledger Live installed. I updated to the newest version the other day and everything is fine on my end. These Ledger bugs are becoming more and more mysterious by the day.

[HCP]

@Captain-Cryptory, just out of curiosity, have you tried looking in the Windows Error Log to see what errors, if any, are reported when you attempt to run Ledger Live and it crashes?

To find the error logs, start "Event Viewer"... and then look in "Windows Logs -> Application". You might need to search through a few warnings/errors from various services... but hopefully near the top you'll find one that has the "Source" value of Ledger Live or similar.

It might give some clue as to why LL keeps crashing for you.

[Chikito]

Event Viewer indicates the same faulting ntdll.dll when LL refuses to  be launched. The system language of this computer is Russian so I don’t pass over here the relevant notification of EV.

maybe, you have to update windows system.

or reinstall ntdll.dll (I am not sure about this)

Code:

regsvr32.exe /u ntdll.dll 

(uninstall the file)

Code:

regsvr32.exe ntdll.dll

(reinstall the file).

https://answers.microsoft.com/en-us/windows/forum/all/app-crash-with-ntdlldll/9aa59f80-99a1-4f3c-b2f0-7eb72df05b2a

https://answers.microsoft.com/en-us/windows/forum/all/faulting-module-name-ntdlldll/82a80b07-6d81-40f7-8aa6-b11f00098480

[Pmalek]

I prefer  to wait for the next 2.5.0 release and see what will happen then.

Version 2.5.0 is out now, maybe you will have more luck with it.
Just leaving this here regarding the ntdll.dll file. Maybe your AV corrupted it or something else. 

However, like any file on your computer it can become corrupted by a virus or trojan. Antivirus programs can detect and clean this file if it has become infected. Because this file is part of Windows users should never delete or remove this file if they think it is infected, let the antivirus program handle it.

https://www.computerhope.com/issues/ch000960.htm

[bob123]

Downloaded directly from their official github account but so much puzzles  for me from Ledger Live team. Why they don't provide the signature to releases? IDK, what to believe any longer.

The windows releases are signed.
You'll get a popup when trying to install a program in windows asking whether you want to execute it. This popup shows you who signed the executable.

Also the one and only detection is from an unknown AV software.
The heuristics which triggered the alarm was apparently the download within the executable.
That's not surprising since ledger live is downloading new updates itself.

[HCP]

Yeah... no issues from my side here... Windows Defender didn't complain about anything. 2.5.0 downloaded through Ledger Live and installed without issue. Everything seems to be running OK.

Seems the "big" feature in this new release was the ability to buy crypto from within LL.

[Lucius]

Captain-Cryptory, ZoneAlarm is detected Ledger Live as trojan even in previous versions, check my post here. There is no doubt that this is a false positive detection, you don't have to worry too much about that. After all, fake Ledger Live can try to steal your coins by convincing you to type your seed or if it contains clipboard malware that would replace your legitimate address.

The first attempt can be avoided only by using common sense, and for the second, the Nano S itself will definitely help by forcing you to check is your sending address match on Ledger Live and on device screen.

[Lucius]

~snip~

No problem, I'm glad you can use Ledger Live again

I'm not competent to say exactly where the problem was with the previous version and with some other versions, but the fact is that there is something different in your OS or maybe even the hardware that was causing the problem. I don't think it's easy to make 100% compatible software, because there is always a small percentage of those who will have a problem for some reason. However, two things are important in this case, you can always go back to the previous version and Ledger makes a fix relatively quickly.

[HCP]

Look as though  I came across one more  puzzle. After upgrading Bitcoin app to 1.4.2 I have got from Ledger (connected to Electrum)  the strange messages at sending BTC  - "Unverified inputs" followed by "Update Ledger Live".

Yeah... I got the same message while playing around with Ledger Nano S and Bitcoin Core/HWI...

I thought it might have been because the UTXOs I was spending were "unconfirmed", but I was advised by achow101 that it's related to the hardware wallet/SegWit flaw that was announced recently.

the current Electrum version is still not accommodated to  1.4.2 bitcoin app.

It's been patched, so if you download and run from source, it'll most likely work without issue... they just haven't released 4.0.0 as yet... fingers crossed it's not too far away