Avast Antiviral reporting benbox.exe has win32:Malware-gen

[gnomic]

Last week I reported to Banggood on Facebook that Avast had detected malware in the Laser Engraver...zip file.

This week there is a new file, Eleks Laser.RAR, so I download it and get the exact same error.

I don't know if this is a false positive or not and I'm not willing to find out by using this file. Has anyone else had this issue?

Does anyone know where I can get a copy of this software?

[Zax]

http://benboxlaser.us/index.php?topic=46.msg308#msg308

Yes, Benbox comes with malware... but the file is unrelated to the operation so just delete it and you'll be good.

- Zax

[gnomic]

I thought I needed it to upload the firmware. no?

[Zax]

Not to my knowledge.

Benbox uses AVRDude to upload firmware, which is totally safe.

- Zax

[helterskelter]

Last week I reported to Banggood on Facebook that Avast had detected malware in the Laser Engraver...zip file.

This week there is a new file, Eleks Laser.RAR, so I download it and get the exact same error.

I don't know if this is a false positive or not and I'm not willing to find out by using this file. Has anyone else had this issue?

Does anyone know where I can get a copy of this software?

I use Norton and i didn't get any warnings. That could be either good or a bad thing. No problems so far

[dindunuffin]

I didn't find any malware with the benbox software I downloaded.   Somebody posting a name of the file (i forget the name) and even after searching for it, I could not find anything. 

[ROSS]

Nothing found here either and I ran it thro Kasperskey a couple of times  to make sure..

[Zax]

I have Symantec and Avast (2 different systems) and both detected LaserDaemon.exe as a trojan. I did some further investigation (being an engineer) and found it opens a port to the internet so isn't a virus but is malware and potentially allows someone to backdoor into your computer or send data out. It serves no purpose as far as I can tell, so delete that file and everything is fine.

Well, except you're left using Benbox... haha.

I fired it up this morning on my dual screen computer, you can't move it to the 2nd monitor by dragging but once you do get it over there it refuses to work. You can't open an image, can't draw... basically it's useless but move it back and it works. Weird!

[dindunuffin]

Where did it place LaserDaemon.exe, I could not find it on my system?  If its there, I definitely want to remove it. The last thing Windows 10 needs is another security hole.

[ROSS]

Where did it place LaserDaemon.exe, I could not find it on my system?  If its there, I definitely want to remove it. The last thing Windows 10 needs is another security hole.

Depends where you downloaded the software from.  I loaded mine from  Maker Block........no sign of it on their download and I have run a couple of Anti Virus checks....

[Zax]

I used the link Banggood provided, the file was in the same folder.

[dindunuffin]

I got mine from GearBest.

[BradleyBob]

I downloaded mine from Bangood last week and there is no malware file in it that I can find. I believe they were made aware and have deleted it.

[rgrokett]

I was able to successfully download and install the BenBox software onto my Windows 10 PC. 

The virus alert is a false positive. It looks scary, but its because the software has (or had) a signature of a socket server in its code. The file called "laserdaemon.exe" is that socket server running on port 7683. Some say you can delete it, but I found that my BenBox GUI could no longer access the USB COM port, so I left it. WireShark shows the port connection between Benbox and laserdaemon, but strangely, no data appears to be passed.  Procmon showed laserdaemon.exe reading the Registry, but doesn't appear to write anything. I did see where Benbox GUI sends an HTTP request to their server each time it starts. No data is passed on this either, so I suspect they are using it as a simple usage counter.

I have used Benbox with my Eleks Laser from GearBest just fine. Though, once in a while it doesn't see the COM port when starting. I just quit BenBox and restart it and its always worked from then.

Go to the Instructable http://www.instructables.com/id/Benbox-With-Eleks-Laser-Engraver-GearBest-Banggood/ for more complete details.

-- Russell