I use Flightsim Hardware from a company called WinWing and Norton is blocking Simlogic.exe and I am unable to use my hardware ! I have placed in exceptions SimAppPro and Norton is still querying the app.
Currently I have uninstalled Norton which I’m unhappy about after recently renewing my subscription
Anybody experiencing this ? Any Solutions ? I’m baffled because Winwing is a big company and expanding ! So why is Norton blocking a safe reliable app ?
I’ve only recently experienced this problem after Windows upgraded my pc to Windows 11
Were Norton 360 still installed. You might have shared related Security History.
Had you included Simlogic.exe with Scans and Antivirus exclusions.
Maybe, Norton detected a vulnerable kernel driver which queried the app.
Maybe, SimAppPro is new/er and Norton needs to gather more telemetry.
Maybe, Norton detected/objected to an unsigned .tmp file.
https://us.winwingsim.com/view/simapppro.html
Maybe, I can reproduce as you report…if I do not hit a paywall.
Is this your SimAppPro? https://us.winwingsim.com/view/simapppro.html
Details
Threat name: IDP.ALEXA.54
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Threat detected
Detected by: Behavioral Protection
On PC from: Unknown
Last Used: Unknown
Startup Item: No
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
The file release is currently unknown
High
The file risk is high.
Activity
Path | Type | Status
C:\USERS\user\APPDATA\LOCAL\TEMP\30AC2KL9MYQ6ZLRFZCBFIHPP59J\SIMLOGIC.EXE | File | Deleted
C:\Users\user\AppData\Local\Temp\2b4fc714-1a8d-4daa-9914-67aaf0927b7b.tmp.node | File | Deleted
Threat cannot be removed
Sorry, SimLogic.exe is being stubborn, It refuses to go into your
Quarantine.
Caveat: I’m not familiar with SimAppPro nor have Login credentials
fwiw ~ at this point.
I’ll imagine Norton needs to clear Unproven. I’ll imagine user needs to submit False Negative report/s.
I’ll imagine Norton needs more telemetry.
Details
Developers: Unknown
Version: 1.16.57
Identified: 8/15/25,
Last Used: 8/15/25,
Startup Item: No
Few users
Hundreds of users in the Norton Community have used this file.
Mature
This file was released 16 days ago.
Unproven
There is not enough information about this file to recommend it.
Origin
Downloaded from: https://download.wwsimstore.com/download/SimAppPro/SimAppPro%20Setup%201.16.57.exe
fwiw ~ I’m monitoring and waiting to hear back from my False Negative submission here &or from my Norton support Case ID nnnnnnnn here.
Note: at this time…
SimAppPro Setup → File Insight = Unproven
SimAppPro → File Insight = Unproven
I’m hoping once Norton clears Unproven rating…then Norton will not object to SimAppPro install/installed.
Note: SimAppPro files may need to be (should be) signed.
Note: at this time v24+ False Negative submission remains stubborn
Threat name: IDP.ALEXA.54
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Threat detected
Detected by: Behavioral Protection
On PC from: Unknown
Last Used: Unknown
Startup Item: No
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
The file release is currently unknown
High
The file risk is high.
Activity
Path | Type | Status
C:\USERS\USER\APPDATA\LOCAL\TEMP\30AC2KL9MYQ6ZLRFZCBFIHPP59J\SIMLOGIC.EXE | File | Deleted
C:\USERS\USER\APPDATA\LOCAL\TEMP\30AC2KL9MYQ6ZLRFZCBFIHPP59J\SIMLOGIC.EXE | Process | Terminated
C:\Users\user\AppData\Local\Temp\30ac2Kl9MYq6ZLRfZCbFiHpP59J\SimLogic.exe | Process | Terminated
C:\Users\user\AppData\Local\Temp\30ac2Kl9MYq6ZLRfZCbFiHpP59J\SimLogic.exe | Process | Terminated
C:\Users\user\AppData\Local\Temp\30ac2Kl9MYq6ZLRfZCbFiHpP59J\SimLogic.exe | Process | Terminated
C:\Users\user\AppData\Local\Temp\30ac2Kl9MYq6ZLRfZCbFiHpP59J\SimLogic.exe | Process | Terminated
C:\USERS\USER\APPDATA\LOCAL\TEMP\NSW9949.TMP\7Z-OUT\SIMLOGIC.EXE | File | Deleted
C:\Users\user\AppData\Local\Temp\7e20c1ae-c31c-4d8c-9550-455bb5414dd9.tmp.node | File | Deleted
C:\Users\user\AppData\Local\Temp\af61a2ea-972e-4f46-b3e9-011a3b318eb9.tmp.node | File | Deleted
C:\Users\user\AppData\Local\Temp\ba5ca2da-afaf-4fe0-b651-d1b8bbb8cf31.tmp.node | File | Deleted
C:\Users\user\AppData\Local\Temp\ae0f0fc9-446b-4f1b-8eb9-14912da1460d.tmp.node | File | Deleted
C:\Users\user\AppData\Local\Temp\c9a1b82e-34ef-474e-a896-a97d654aeb66.tmp.node | File | Deleted
C:\Users\user\AppData\Local\Temp\146e1e64-8fe4-45eb-b81e-57559463db7f.tmp.node | File | Deleted
C:\Users\user\AppData\Local\Temp\c210e68c-a046-4b43-83d6-a984740f5721.tmp.node | File | Deleted
AI Overview
The “IDP.ALEXA.54” detection by antivirus software like Avast is often a false positive, meaning it incorrectly flags legitimate software as malicious. It’s a generic detection by the antivirus’s heuristic engine, which can misinterpret certain behaviors or file types as harmful.
Heuristic Detection:
IDP.ALEXA.54 is a generic detection used by antivirus programs to identify potential threats based on suspicious behavior or characteristics.
False Positives:
Newly created executables, files in the %temp% directory, or even legitimate software from trusted sources can trigger this detection, leading to false alarms.
Potential Malicious Behavior:
While often a false positive, IDP.ALEXA.54 can sometimes indicate genuine malware, particularly if it’s bundled with other suspicious files or behavior.
Action to Take:
If you’re certain the software is legitimate and from a trusted source, you can safely ignore the detection. If you’re unsure, consider scanning the file with a different antivirus program or uploading it to VirusTotal for a second opinion. If the second scan also flags the file as malicious, it’s recommended to remove it.
SimAppPro shortcut call … causes Norton to chew on \app.asar.unpacked\SimLogic.exe and what appears to be related temp files (since, I’d cleared Quarantine & System temp files)
Hello @MrLee_Rose
fwiw ~ I sent an email to WinWing https://winwingsim.com/view/contact.html…pointing to @MrLee_Rose thread.
Note: I’m not familiar with WinWing/SimAppPro. I imagine a SimAppPro user will communicate better with WinWing.
I’ve no idea if this scanning is normal or because I’ve not set up (done something) SimAppPro.
I’m wondering whether…if I do something with SimAppPro… then this scanning will stop.
I’ll need OP to chime in with their observations.
I’m curious what SimAppPro is doing your side…now.
Now, that known Unproven are cleared.
Note: since SimAppPro files are not signed. Norton may never be satisfied.
