LG monitors silently install software through Windows Update without user consent (videocardz.com)
from cm0002@literature.cafe to cybersecurity@infosec.pub on 18 Jul 19:26
https://literature.cafe/post/33770043

#cybersecurity

threaded - newest

stoy@lemmy.zip on 18 Jul 19:37 next collapse

Same shit as Logitech has done for several years, plug any logitech mouse into a Windows 7/10/11 machine and it will automatically install Logitech Download Assistant without any prompt.

Peffse@lemmy.world on 18 Jul 21:21 next collapse

Is auto-install something Windows debloat tools disable? I’ve been using the G203 mouse and it’s predecessors for years without any “download assistant” getting installed.

I even had to go to Logitech’s website to manually download the software suite so the LEDs would stop flashing and changing colors.

stoy@lemmy.zip on 19 Jul 04:14 collapse

The LDA won’t show up in Add/Remove programs, it is a small DLL that beings up a branded popup by the clock asking you to download the Logitech control software.

The LDA popup looks like this currently:

<img alt="" src="https://lemmy.zip/pictrs/image/68206cc7-7f20-45bc-b230-5171da922c64.avif">

If you google Logitech Download Assistant you will find a lot of posts about it and asking how to uninstall it.

To check if you have it on your computer, you can open the Task Manager, go into the Startup tab, and check the list there.

You can also check the System32 folder and look for a file called LogiLDA.dll

Peffse@lemmy.world on 19 Jul 05:21 collapse

Very informative! Thank you!

I have confirmed that neither startup, nor System folders on the old Win11 install have LDA. Very strange how I was spared, despite using the G203 and K120 to type this post.

stoy@lemmy.zip on 19 Jul 05:28 collapse

You might have had a GPO configured to stop this.

Gerudo@lemmy.zip on 18 Jul 22:38 next collapse

Mine has never tried to install anything automatically.

stoy@lemmy.zip on 19 Jul 04:03 collapse

What happens is that when you connect a Logitech mouse or keyboard to a Windows 7/10/11 machine for the first time, Windows Update doesn’t just download a driver (a .inf file) but also Logitech Download Assistant (a .dll file) and runs it.

You will then get a branded popup in the system tray prompting you to download the actual control software.

The LDA software is set to always run in the background, it also doesn’t show up in add/remove programs, and is rather annoying to get rid of.

Ghoelian@piefed.social on 19 Jul 08:57 collapse

Huh, I always thought windows just had some dumb mechanism that let random USB devices show a popup or something, but this is even more stupid.

atomicbocks@sh.itjust.works on 19 Jul 00:49 collapse

I’ve only seen this happen with a prompt.

stoy@lemmy.zip on 19 Jul 03:48 collapse

What happens is that when you connect a Logitech mouse or keyboard to a Windows 7/10/11 machine for the first time, Windows Update doesn’t just download a driver (a .inf file) but also Logitech Download Assistant (a .dll file) and runs it.

You will then get a branded popup in the system tray prompting you to download the actual control software.

The LDA software is set to always run in the background, it also doesn’t show up in add/remove programs, and is rather annoying to get rid of.

Malyca@lemmy.zip on 19 Jul 08:35 next collapse

I love that I bought 4 of these fucking TVs and I think my son’s monitor. Those fuckers better give me a refund.

OwOarchist@pawb.social on 19 Jul 09:18 collapse

Now I’m imagining my monitor trying to install shit on my PC through Windows Update, and it’s like “WTF is a Linux? Why my update no work?”