topic Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update in Solid State Drives (NAND)

Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

jCav — Sun, 10 Apr 2022 06:19:16 GMT

The Intel Driver & Support Assistant to keep a NUC 8i7BEH/NUC8BEB updated is showing that the Solidigm Storage Tool has an available update (Version 1). When downloading and installing the SST update the system security app Malwarebytes detected that it contained PDM:Trojan.Win32.Bozan.a malware flagged with a high risk status.

Are other NUC owners experiencing this as well?

Is this a false positive, an actual corruption, or an in-built function with a questionable process?

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

LeonWaksman — Sun, 10 Apr 2022 10:09:30 GMT

Downloaded Solidigm Storage Tool (Intel® branded NAND SSDs) and installed manually. No, problem observed. Working as expected.

Checked on NUC8i7HVK, SSD 760P, Windows 11 Pro (without third party Antivirus).

Leon

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

jCav — Sun, 10 Apr 2022 12:37:19 GMT

I did try that too after I got the first alert. Got the download, unzipped it, and when I tried installing it the anti-malware responded with the same trojan alert and blocked the app from further running. Maybe a possible false positive but I'm not quite sure I want to install it with security off just so it goes through.
Would reports of this kind of issue be addressed by Intel team anytime soon?

J.

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

n_scott_pearson — Sun, 10 Apr 2022 23:37:50 GMT

I am not detecting any malware using either McAfee VirusScan or MS Defender. It may be that Malwarebytes is slightly ahead in their detection algorithm deployment, but I doubt it. Still, Intel Customer Support should investigate further (@Ronny_G_Intel?).

...S

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

jCav — Mon, 11 Apr 2022 04:06:56 GMT

Got the trojan alert from another computer running the Kaspersky Anti-Ransomware for Home and MS Defender. The former reported the malware while the later didn't. I agree that further investigation should be made.

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

LeoD — Tue, 12 Apr 2022 08:21:18 GMT

Have the same problem...will report it to Intel too

Re:Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

JosafathB_Intel — Tue, 12 Apr 2022 23:18:04 GMT

Hello, jCav, Superusers, and community members

We appreciate your feedback related to the new Solidigm Storage Tool (SST) seems that this problem is happening only when the Kaspersky® anti-virus is on the system.

We have another community thread related to the same topic that we are in the middle of the investigation:

https://community.intel.com/t5/forums/forumtopicpage/board-id/solid-state-drives/message-id/27196#M27196

We can assure you that there is no malware, trojan, or harmful software in the package.

As stated by several users, the only anti-virus reporting the package as a tread is the Kaspersky® anti-virus.

Please take into consideration that this issue may be associated with other known issues related to the Intel® Driver & Support Assistant (Intel® DSA) when using the Kaspersky® anti-virus:

https://www.intel.com/content/www/us/en/support/articles/000058791/software/software-applications.html

LeoD:

We have received your feedback, and we noticed that you have posted on several threads and the community about this situation that is currently under investigation.

We appreciate your patience and comprehension of this false positive issue related to a third-party anti-virus. We will be posting an update as soon as we have more information or a solution.

Best regards.

Jos B.

Intel® Customer Support Technician.

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

jCav — Wed, 13 Apr 2022 07:09:51 GMT

Thank you, LeoD, for your reply and your persistence in getting the message through.

Thank you, Jos B., we very much appreciate your response in this regard and are definitely looking forward the update.

Best regards,

jCav

Re:Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

JosafathB_Intel — Wed, 13 Apr 2022 17:01:21 GMT

Hello, jCav,

Thank you for your reply.

You are welcome. It is our pleasure to assist you regarding this matter.

We are still working on the investigation of the issue the community reported when using the new Solidigm Storage Tool (SST), and the Kaspersky® anti-virus is active on the system.

We appreciate your patience and comprehension of this false positive issue related to a third-party anti-virus.

We will be posting an update on this thread as soon as we have more information or a solution to provide you.

Best regards.

Jos B.

Intel® Customer Support Technician.

Re:Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

JosafathB_Intel — Tue, 19 Apr 2022 00:44:02 GMT

Hello, jCav, Superusers, and community members.

We appreciate your patience.

We have been working on reproducing the issue you are reporting on this thread and other threads on the community like https://community.intel.com/t5/forums/forumtopicpage/board-id/solid-state-drives/message-id/27196#M27196, and we have great news:

We had reproduced a similar issue with Kaspersky* Solidigm Storage Tool (Intel® branded NAND SSDs) viruses which is a false positive.

Not only this thread on the Kaspersky* community confirms our suspicion that this was a false positive, but Solidigm® submitted a 'false positive report' for the Solidigm® Storage Tool with Kaspersky*, to which Kaspersky* confirmed that it is a false positive and they are working on the fix. For more information about this issue, visit the Solidigm Storage Tool (Intel® branded NAND SSDs) viruses thread on the Kaspersky* forums.

Based on this information, if you have any other questions related to Kaspersky*, we advise you to contact them directly.

We appreciate the time and effort you all took to bring this issue to our attention.

We will close this thread since the issue is related to a third-party tool and the solution is available on the link to the Kaspersky* forums previously provided.

Best regards.

Jos B.

Intel® Customer Support Technician.

Re: Re:Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

jCav — Fri, 06 May 2022 10:09:34 GMT

Hello Jos B.,

Thank you very much for the validation work on this issue and providing a resolution. It's very much appreciated.

I recently reenabled the update process on the Intel Driver and Support portal and the update completed without issue.

Apologies for such a delayed reply.

Best regards,

jCav

Re: Trojan Malware Detected in Solidigm Storage Tool (Intel® branded NAND SSDs) Driver Update

Luciano_Nhantum — Mon, 09 May 2022 10:14:23 GMT

True the concern of viruses and invasions is very worrying for the whole world in a unique way for the manufacturers of the processors