Each time I start the computer after recently installing"Windows
Defender-Beta 2"
a message is listed in event viewer ,system: Windefend has found malware and
it references ISLNDIS5.sys. I cant find anything wrong, is this significant?
Chas

It is possible that this is a false positive. Googling, I see some
references that seem to associate this with malware, and others that
indicate it is a normal part of networking gear, probably wireless
networking gear.

If you have wireless networking installed, and the location of the
referenced file is consistent with being a part of the drivers for
that--this may be a false positive.

I suspect that this file is being listed as "unknown" rather than known
bad--because you aren't getting an alert from the UI--you can turn that on
in the options settings.

You might write back with the vendor and model of the networking gear and
maybe we can pin this down better.

--

"ChasX" <(E-Mail Removed)> wrote in message
news:C853DB9E-CEC2-4D4F-86D3-(E-Mail Removed)...
> Each time I start the computer after recently installing"Windows
> Defender-Beta 2"
> a message is listed in event viewer ,system: Windefend has found malware
> and
> it references ISLNDIS5.sys. I cant find anything wrong, is this
> significant?
> Chas

I looked in the history section of WD B2 (I didn't realize there was a
history section)
and the path to the file pointed to the Microsoft broadband networking
utility which was loaded with my Microsoft MS720 wireless card. It must be
safe then to mark it "ignore". The category in history was listed as "not yet
classified". Thanks Bill for your rapid response.
chas

"Bill Sanderson" wrote:

> It is possible that this is a false positive. Googling, I see some
> references that seem to associate this with malware, and others that
> indicate it is a normal part of networking gear, probably wireless
> networking gear.
>
> If you have wireless networking installed, and the location of the
> referenced file is consistent with being a part of the drivers for
> that--this may be a false positive.
>
> I suspect that this file is being listed as "unknown" rather than known
> bad--because you aren't getting an alert from the UI--you can turn that on
> in the options settings.
>
> You might write back with the vendor and model of the networking gear and
> maybe we can pin this down better.
>
> --
>
> "ChasX" <(E-Mail Removed)> wrote in message
> news:C853DB9E-CEC2-4D4F-86D3-(E-Mail Removed)...
> > Each time I start the computer after recently installing"Windows
> > Defender-Beta 2"
> > a message is listed in event viewer ,system: Windefend has found malware
> > and
> > it references ISLNDIS5.sys. I cant find anything wrong, is this
> > significant?
> > Chas
>
>
>

Duh--I have that gear installed some places--I guess I just haven't checked
the event logs on those machines!

Yes--"not yet classified" items are not, by default brought to the users
attention as an alert. This behavior can be changed in Windows Defender,
Tools, General Settings, scroll down to near the end.


--

"ChasX" <(E-Mail Removed)> wrote in message
news:8577BDE0-DF60-46EC-BC06-(E-Mail Removed)...
>I looked in the history section of WD B2 (I didn't realize there was a
> history section)
> and the path to the file pointed to the Microsoft broadband networking
> utility which was loaded with my Microsoft MS720 wireless card. It must
> be
> safe then to mark it "ignore". The category in history was listed as "not
> yet
> classified". Thanks Bill for your rapid response.
> chas
>
> "Bill Sanderson" wrote:
>
>> It is possible that this is a false positive. Googling, I see some
>> references that seem to associate this with malware, and others that
>> indicate it is a normal part of networking gear, probably wireless
>> networking gear.
>>
>> If you have wireless networking installed, and the location of the
>> referenced file is consistent with being a part of the drivers for
>> that--this may be a false positive.
>>
>> I suspect that this file is being listed as "unknown" rather than known
>> bad--because you aren't getting an alert from the UI--you can turn that
>> on
>> in the options settings.
>>
>> You might write back with the vendor and model of the networking gear and
>> maybe we can pin this down better.
>>
>> --
>>
>> "ChasX" <(E-Mail Removed)> wrote in message
>> news:C853DB9E-CEC2-4D4F-86D3-(E-Mail Removed)...
>> > Each time I start the computer after recently installing"Windows
>> > Defender-Beta 2"
>> > a message is listed in event viewer ,system: Windefend has found
>> > malware
>> > and
>> > it references ISLNDIS5.sys. I cant find anything wrong, is this
>> > significant?
>> > Chas
>>
>>
>>