HEU_CDPLCEXT

  • 1
  • Question
  • Updated 11 months ago
  • Answered
This virus was reported yet does not appear on your website. How is this possible? Microsoft Software Removal tool did not flag the supposedly infected file.

Viruses.csv file shows:
5/28/2017 10:22 HEU_CDPLCEXT Threat C:\Windows\System32\rundll32.exe Detected Correlation Scan

Triggering event was load of C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\LenovoBatteryGaugePackage.dll




Photo of randdeck

randdeck

  • 74 Points

Posted 1 year ago

  • 1
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 21,354 Points 20k badge 2x thumb
Hi Randdeck,

Welcome to TM Home users Community, a public site where volunteers try to help each-other , also there are TM Employees that can give answers.
I think it is a false positive. wait for a TM employee to answer you.

Kind regards,
Tom
Photo of Jim Smith

Jim Smith

  • 100 Points 100 badge 2x thumb
I got the same message in my monthly report from Trend.  Detected 5/26/2017.

Jim Smith
Photo of TM_Ferry

TM_Ferry, Employee

  • 2,536 Points 2k badge 2x thumb
Hi randdeck,

Thank you for posting here on our community and welcome to Trend Micro Community!

This detection is just a false positive. The file that it is referring to, is the Lenovo version of the battery icon which shows more details than the Windows battery icon. 

It is a legitimate software and if you're having problem with your Lenovo's software because Trend Micro has blocked or removed the file, you may restore it from the security reports of Trend Micro program. Here's the steps on how to do it:

1. Open your Trend Micro program and click the pie graph icon beside the scan button. (See image below)



2. Under the Security Threats, you'll see the threats detected by Trend Micro.
3. Choose the threat detected by Trend Micro program.
4. Click Restore at the right part of the Trend Micro program.
5. The file will be restored and it will also be included in the exception list of the Trend Micro program.

Hope these steps help you. Should you have any other concern, please let us know.

Enjoy the rest of your day!

Trend Micro Home Users Community
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
I don't see the option of Restore to click.
Photo of TM_Victor

TM_Victor, Employee

  • 4,724 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of TM_VEN

TM_VEN, Employee

  • 1,222 Points 1k badge 2x thumb
Hi LADYSAPPHIRRE and welcome to the Community!


Thank you for reaching our support.


If you don't see any "Restore" button on the Security Report. maybe you haven't clicked the detected file or the file is not safe to restore.

To make sure we might need a screenshot of the security report or the details of the detected file so we can review it further.


Thank you and have a great day!


Trend Micro Home Users Community
Photo of TM_Victor

TM_Victor, Employee

  • 4,880 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of TM_Victor

TM_Victor, Employee

  • 4,880 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
It the HEU_CDPLCEXT file for a game I got off Steam.
Photo of TM_Victor

TM_Victor, Employee

  • 4,724 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of TM_VEN

TM_VEN, Employee

  • 1,222 Points 1k badge 2x thumb
Hi LADYSAPPHIRRE,


Thank you for your response.


For that you can just click on the detected file and it will show you other details of the file and there will be a blue button saying "Restore".


Hope this helps.


Trend Micro Home Users Community
Photo of TM_Victor

TM_Victor, Employee

  • 4,880 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
NO BLUE BUTTON
(Edited)
Photo of TM_Victor

TM_Victor, Employee

  • 4,724 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of TM_Victor

TM_Victor, Employee

  • 4,900 Points 4k badge 2x thumb
Hi LADYSAPPHIRRE,

I would just like to know if you have downloaded this game named "Blackwake" via steam? This executable file is related to it and we would like to know if you are using it. These details are as seen from the screen shots you have provided where the files are located.

Trend Micro Home Users Community
Photo of TM_Victor

TM_Victor, Employee

  • 4,900 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
I haven't used it cause trend says it was blocked.
Photo of TM_Victor

TM_Victor, Employee

  • 4,724 Points 4k badge 2x thumb
Different concern from original post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
There is no option to restore as I have been saying.
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
I looked up what you are talking about and that blue restore button is not on my trend micro. As you can see in the screen shot!
(Edited)
Photo of TM_Victor

TM_Victor, Employee

  • 4,724 Points 4k badge 2x thumb
different concern to be merged on new post

Please reference the new conversation here: How to restore a deleted file by Trend Micro program
Photo of LADYSAPPHIRRE

LADYSAPPHIRRE

  • 242 Points 100 badge 2x thumb
Its not deleted its blocked.  Look at the pic its being to compared to from he web.
Photo of TM_Victor

TM_Victor, Employee

  • 4,724 Points 4k badge 2x thumb
Hi LADYSAPPHIRRE,

Thank you for this follow up screen shot.

Can we ask you to contact our support lines regarding this case? It seems that we need to escalate your concern for further analysis as it is a possible false detection of the file if it is legitimate.

You may contact us via - Ways to Contact Support

Thank you and have a great day!

Trend Micro Home Users Community

This conversation is no longer open for comments or replies.