Comment in event viewer :WinDefend...

[Guest]

Each time I start the computer after recently installing"Windows
Defender-Beta 2"
a message is listed in event viewer ,system: Windefend has found malware and
it references ISLNDIS5.sys. I cant find anything wrong, is this significant?
Chas

 

[Bill Sanderson]

It is possible that this is a false positive. Googling, I see some
references that seem to associate this with malware, and others that
indicate it is a normal part of networking gear, probably wireless
networking gear.

If you have wireless networking installed, and the location of the
referenced file is consistent with being a part of the drivers for
that--this may be a false positive.

I suspect that this file is being listed as "unknown" rather than known
bad--because you aren't getting an alert from the UI--you can turn that on
in the options settings.

You might write back with the vendor and model of the networking gear and
maybe we can pin this down better.

 

[Guest]

I looked in the history section of WD B2 (I didn't realize there was a
history section)
and the path to the file pointed to the Microsoft broadband networking
utility which was loaded with my Microsoft MS720 wireless card. It must be
safe then to mark it "ignore". The category in history was listed as "not yet
classified". Thanks Bill for your rapid response.
chas

 

[Bill Sanderson]

Duh--I have that gear installed some places--I guess I just haven't checked
the event logs on those machines!

Yes--"not yet classified" items are not, by default brought to the users
attention as an alert. This behavior can be changed in Windows Defender,
Tools, General Settings, scroll down to near the end.


--