How can we help you today?

McAffee Antivirus might detect a false positive trojan when scanning the file “xlMicrologic.dll” located at C:\Program Files (x86)\Schneider Electric\Power Monitoring Expert\system\bin\

Question:

PME8.2 Systems running on a system with McAfee might be affected by following issue.
McAffee Antivirus  might detect a false positive trojan when scanning the file “xlMicrologic.dll” located at C:\Program Files (x86)\Schneider Electric\Power Monitoring Expert\system\bin\

This is the error that is seen in the windows log when the file is deleted:
"The file C:\Program Files (x86)\Schneider Electric\Power Monitoring Expert\system\bin\xlMicrologic.dll contains GenericRXEI-NB!D7D1FE14DE2E Trojan.  The file was successfully deleted.

Confirmed McAffeeVersions affected

From DAT version: 8838.0000 to   DAT version: 8844.0000

Issue has been reported to McAffee Support and  they have confirmed that the issue is NOT present in DAT Version:8846.0000        (https://kc.mcafee.com/corporate/index?page=content&id=KB85567)
Please ask customer to deploy last update for antivirus and make sure is DAT Version:8846.0000 or higher

Cause:
False positive detected by specific version of McAffe. From DAT version: 8838.0000  to   DAT version: 8844.0000

Resolution
Source:
the "xlMicrologic.dll" file
located at "C:\Program Files (x86)\Schneider Electric\Power Monitoring Expert\system\bin".
Version:  8.2.17055.2

  1. Please talk to customer to see I their McAffee is running DAT Version:8846.0000    or higher version
  2. Once they run with higher version, please ask their IT support to scan the file. (I would suggest different location on server for first check)
  3. Once the file passes the Scan on their server, then stop ION Services and place  the file in the native location "C:\Program Files (x86)\Schneider Electric\Power Monitoring Expert\system\bin".
  4. Make sure the digital signature is preserved, and then start the ION services.


If something goes wrong in the process, please get the Windows Eventlogs (Source> McLogEvents), PME diag file, if possible the  McAffee logs and feedback about the signature of the micrologic file, and contact technical support.

Schneider Electric Canada

Attachment(s)
McAfee deleted xlMicrologic.dll.zip [734.17 KB]
Explore more
Range:
Users group

Discuss this topic with experts

Visit our community and get advice from experts and peers on this topic and more
Explore more
Range:

Need help?

Need help?

Product Selector

Product Selector

Quickly and easily find the right products and accessories for your applications.

Get a Quote

Get a Quote

Start your sales inquiry online and en expert will connect with you.

Where to buy?

Where to buy?

Easily find the nearest Schneider Electric distributor in your location.

Help Center

Help Center

Find support resources for all your needs, in one place.

  • Help and Contact Center
  • Contact Sales
  • Find our Offices
  • Where to Buy
  • Careers
  • Company Profile
  • Investors
  • Newsroom
  • Report a Misconduct
  • Product Documentation
  • Product Selectors
  • Software and Firmware
  • Product Substitution and Replacement
  • Blog
  • Events
  • Schneider Electric Community
  • Sustainability
  • Legal Information
  • Privacy Policy
  • Cookie Notice
  • Terms of use
  • Change your cookie settings