I was going to post this here ===>>>
https://www.mobileread.com/forums/sh...=326848&page=3, but decided here would be a better place
I've had one malware infestation since I first installed a beta copy of Windows 2.0 from a couple of boxes of diskettes 30+ years ago on a corporate PC.
It arrived in the early '90s when a PC support techie installed a 3270 terminal emulation package on my corporate PC. It was detected by me when 'stuff' started to go awry, but not by the PC Support recommended AV. The source of the malware was the PC Support server. Not only did they screw up my almost new PC, they also screwed the bank's COO and his PA's new laptops. Heads rolled, out the door, toot sweet - next day.
A few years ago I was installing a new version of CCleaner when Defender popped up to announce - "Oi, that proggie your trying to install is crap - it's infested with Trojan ????." So I ran the install.exe through VT, only one scanner reported anything, but it wasn't Trojan ????, Defender wasn't in the VT scanner list. So, mused I: It must be a false positive. But before telling Defender to ignore it, I did some searches and discovered that CCleaner was known to have been infested with Trojan ???? at source. I also found apologia from the company that had just bought CCleaner's parent company - AVG or Avast, I forget which.
FWIW Microsoft has 99 pages of open source projects at GitHub (which it owns), Apple has 9.
BR