Bug 103356 - MS Defender detects soffice.bin as trojan
Summary: MS Defender detects soffice.bin as trojan
Status: RESOLVED NOTOURBUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
5.2.1.2 release
Hardware: All Windows (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
: 103348 103382 (view as bug list)
Depends on:
Blocks:
 
Reported: 2016-10-20 16:54 UTC by L.Schepers
Modified: 2016-10-25 15:19 UTC (History)
4 users (show)

See Also:
Crash report or crash signature:


Attachments
screenshot (81.15 KB, image/png)
2016-10-20 17:05 UTC, michel
Details

Note You need to log in before you can comment on or make changes to this bug.
Description L.Schepers 2016-10-20 16:54:24 UTC
Today MicroSoft Windows10 Defender has two times detect "soffice.bin" as a trojan. Forceful MS Defender prevent the use of the whole LibreOffice Programm. It was necessary to uninstall LibreOffice and reinstall it.
Comment 1 michel 2016-10-20 17:05:49 UTC
Created attachment 128101 [details]
screenshot
Comment 2 Cor Nouws 2016-10-20 17:43:31 UTC
Hi guys,

Thanks for letting us know. I've seen similar reports.
The 'authority' to inform about this issue however is Microsoft.

Best,
Cor
Comment 3 Maxim Monastirsky 2016-10-20 17:58:52 UTC
*** Bug 103348 has been marked as a duplicate of this bug. ***
Comment 4 Maxim Monastirsky 2016-10-22 20:35:21 UTC
*** Bug 103382 has been marked as a duplicate of this bug. ***
Comment 5 Adolfo Jayme Barrientos 2016-10-23 22:45:11 UTC
You can submit reports of false positives to Microsoft here:

https://www.microsoft.com/security/portal/submission/submit.aspx

You need to check the option “I believe this file should not be detected as malware”.
Comment 6 L.Schepers 2016-10-25 07:41:46 UTC
(In reply to Cor Nouws from comment #2)
> Hi guys,
> 
> Thanks for letting us know. I've seen similar reports.
> The 'authority' to inform about this issue however is Microsoft.
> 
> Best,
> Cor

Sure - but:
„It's our currency, but it's your problem.“ John Connally at the day of this remark Secretary of the Treasury.
Keep MS Office in mind and you could here Bill saying: "It's our operating system, but your problem".
If Libre is looking for success, you pointed the right way to fix the bug, but that way did not solve your problem.
Personally I have set the "soffice.bin" file to the exception list of MS Defender. Not smart, not elegant but it solves my problem.
Comment 7 Friederich Prinz 2016-10-25 09:56:40 UTC
100 % aggree!

I send some money to Libre because I think the product is valuable and their users are taken seriously. Of course it is a serious interest of microsoft to discredit rivals of Office 365. So it must be a serious interest of Libre to fight out all attempts of discrediting their product!  
I am a user. I do not want to fight with anyone. I want to use a valuable product, factured by a valuable community! Just doit, Libre!
Comment 8 Cor Nouws 2016-10-25 10:41:43 UTC
@Friedrich, L, 

Thanks, sure. Can you please fill in the form from the link in comment #5, or maybe did you already do so..?
Comment 9 Friederich Prinz 2016-10-25 12:07:47 UTC
@Cor Nouws: "Can you please fill in the form from the link in comment #5, or maybe did you already do so..?"

I tried this. But I deleted the trojan marked soffice.bin. Microsofts  form does not take any notice to the Defender without a sample. Sorry ...
Comment 10 Joe Schutts 2016-10-25 15:19:43 UTC
Hi Everyone,

I too had this same problem with "MS Defender" saying that the "soffice.bin" was "Malware" and blocking it. But I DID NOT have to Re-Install LibreOffice like others have said. All I did was to go into the "QUARANTINE" Directory (of MS Defender) and mark the file for "RESTORE" and that fixed it. LibreOffice worked as before without ANY problems.

Honestly though, when this happened I contacted LibreOffice (within 10 minuted) and notified them about the problem (thinking that POSSIBLY, JUST POSSIBLY) they might have come in contact with a Virus (or something else).

I was hoping for them to take a look at the "Soffice.Bin" file (which I would have gladly sent them) I had in the Quarantine Directory (BEFORE I Restored it back to where it was). They dropped the ball (as far as I'm concerned) as they NEVER asked me to send (the Soffice.Bin file) to them

Although I have not had ANY problems since I Restored the file it STILL make me concerned as to WHAT actually happened and WHY it did what it did. I do have to say in LibreOffice's defense that they were fast to respond to this issue although I do believe they could have done more...

All through this time (including up to now) I have been reminded about an issue that happened sometime back in the 70's or 80's when some Game Maker (Software company whom I can't remember the name of) sent out CD's that customers bought, that unknowingly contained a virus that infected millions of users worldwide. I for one do not want to go through this again, nor do I wish the same for others.

Hope this helps...

Best Regards...

Joe Schutts