Questions tagged [windows-defender]
In Windows 8 and later versions of Windows, Windows Defender is a built in antivirus software product that replaces Microsoft Security Essentials. Before Windows 8, Windows Defender featured antispyware capabilities and was not offering antivirus protection.
360
questions
-2
votes
1
answer
49
views
windows 11 family antimalware service executable cannot been kill
Before you judge me saying there is already answer, I want to tell you that didn't work on windows 11. I has tried a lot of ways to kill it but it's still using more than 30% cpu of 12 core which is a ...
- 1
0
votes
2
answers
175
views
New Windows install, Tamper Protection disabled
So I have bought a used computer which in general works as intended. But when I did a fresh install of Windows 10 22H2 from USB, and before making any changes or downloading any AV, I noticed that ...
-1
votes
1
answer
33
views
Windows Defender cannot seem to remove an identified trojan from the threat list
About a week ago, I got an alert from Windows Defender stating that I had a trojan in my user folder, after investigating it for a bit, I realized it was a false positive, but nontheless I decided to ...
3
votes
2
answers
2k
views
Is this a Trojan? Random Windows 10 Microsoft Defender Antivirus sample submission message. What is this?
I have received a weird message from Windows (see picture). I would like to know what this exactly means.
I have only used the Edge browser (if it even has to do with it) maybe twice. Also sometimes ...
0
votes
0
answers
47
views
How to add Windows Defender exclusion from Linux?
I am currently working on many computers where I must add exclusions from a Linux USB (Preferably by a script I am making) to the windows PC.
I tried using chntpw but it does not show the registy keys ...
0
votes
1
answer
134
views
Windows Defender never completes offline scans - could this be malware and how do I restore normal function?
I have not been able to view scan reports after running offline scans since I started actively running them (about 6 months ago). I always assumed no news was good news and left it at that. Today I ...
- 119
0
votes
0
answers
29
views
How do I stop windows security breaking new video games?
I have Windows Defender security on
One of the features is "protected folder access."
This feature basically stops programs from accessing folders they are not allowed to access.
This ...
- 2,625
0
votes
0
answers
38
views
Check Windows Defender "active task" on Windows Server Core
Context:
I've got a Docker-host for internal build CI/CD pipelines which is using way more CPU than it seems it should, and most of that is going to Windows Defender.
Problem:
I'd like to know what ...
- 383
1
vote
1
answer
233
views
Powershell - how to add exclusions for defender
I need to set folder exclusion for defender using powershell. The problem is that folder has dot in its name ../.m2/.. (folder for IDE IntelliJ IDEA). If I am trying to create this exclusion with this ...
- 11
0
votes
1
answer
233
views
Unable to set new owner on Windows Defender. Access is denied
I was trying to disable Windows Defender realtime scanning due to the inordinate amount of resources it uses. Yes, I am aware of the consequences.
I have tired disabling the service in GPEDIT but can'...
1
vote
1
answer
101
views
Unable to remove "Scan with Windows Defender" from Windows Explorer context menu
To remove Scan with Windows Defender from Windows Explorer's context menu, I obtained remove Scan with Windows Defender.reg from here
Windows Registry Editor Version 5.00
[-HKEY_CLASSES_ROOT\*\...
- 937
0
votes
0
answers
46
views
File context menu contains Windows Defender, not Microsoft Defender
When I right-click on a file in the Windows Explorer to perform an on-demand scan of a single file, the context menu (shown below) presents me with Windows Defender, not Microsoft Defender. My ...
- 937
0
votes
0
answers
243
views
Weird message in event log: "Microsoft Defender Antivirus ϋśèď сľöüδ ргοτэсŧιőň тο ġěţ ąðδίŧΐŏńάľ ѕеςųгĩŧý ΐиŧéľŀìģεπčз"
A relative of mine complained of a slow computer. At my suggestion, they rescanned the hard drive. It found issues, but the on-screen information was quite useless so I checked the Event Log. Several ...
- 139
0
votes
0
answers
29
views
Windows Defender deletes files of my Ubuntu Server
I have two ubuntu servers i use as storage servers set up with samba files share. I connect to them through my main machine running windows 10 and some files on the server get flagged and instantly ...
2
votes
2
answers
420
views
Will Windows Defender full scan adversely affect a failing hard disc?
A monthly anti-malware full scan was run on this pc using Windows Defender (-aka- Windows Security) as routine, but not this month.
Will running a full scan from Windows Defender adversely affect the ...
- 4,112
39
votes
4
answers
15k
views
Why has Windows Defender started removing shortcuts on 13 January 2023?
All of a sudden, Windows Defender has removed loads of shortcuts (.lnk files) from our Windows 10 and 11 computers. Dozens of computers affected.
Shortcuts have disappeared from both the desktop ...
- 845
0
votes
0
answers
5
views
Remove Malware PHP/Remoteshell.C from Wordpress websites [duplicate]
I got infection by a malware in some Wordpress websites that are installed in a remote Windows Server 2016 with IIS
The malware is PHP/Remoteshell.C and Windows Defender catch it and put some files in ...
- 101
2
votes
0
answers
31
views
Is there a boolean "NOT" operator in Windows Firewall Rules? [closed]
Quick question for setting up Windows Defender Firewall rules:
Is there a boolean NOT operator that can be used with IP addresses?
What I would like to do is create an outbound firewall rule to ...
6
votes
2
answers
3k
views
Defender deleted a file and protection history is empty, how to restore?
Defender in windows 11 deleted a file and protection history is empty, how to restore ? and how to make it quarantine the file instead of deleting ?
- 861
0
votes
0
answers
384
views
Windows defender flags .vmdk files from VMWare as virus. False positive?
Since like half a year windows defender flags the .vmdk file from vm ware machines as virus.
It will say that it is infected with a form of "BlacoleRef". Strangly is that this doesn't happen ...
- 133
0
votes
0
answers
286
views
Windows Defender - How can I temporarily disable calls to MpCmdRun -GetDeviceTicket using registry editor
I have noticed that calls to MgCmdRun.exe GetDeviceTicket -AccessKey <SOME_KEY> were causing glitches in a rendering application I am working on.
I was wondering if there was a way I could ...
1
vote
1
answer
364
views
How do I "mark" a file as safe against Windows Defender and/or Smart Screen?
I have an .ahk script that I wrote myself that was quarantined on a separate work station. I wasn't prompted (that I myself saw), and only realized it occured when I saw an error message on startup (...
- 941
0
votes
1
answer
95
views
How can I configure Windows Defender so that it doesn't prevent moving files it suspects to be a virus?
Windows Defender prevents moving files it suspects to be a virus:
Operation did not complete successfully because the file contains a virus.
How can I configure Windows Defender so that it doesn't ...
- 19.9k
2
votes
2
answers
418
views
When I run Windows Sandbox, is Defender running?
I occasionally need a bit of shareware / free software. I'm always a bit paranoid about downloading those types of things, and usually check them out in Windows Sandbox (on Win 11 Pro). I don't see ...
- 143
1
vote
0
answers
152
views
Windows Defender Firewal Incoming Rules issue with definition of Protocol + Port only
i faced today an issue, which makes to me no sense and i would like to ask if you know this issue or if something is going wrong on my setup.
I have a Windows Server 2019 and installed an IIS Role on ...
- 11
0
votes
1
answer
102
views
Defender Application Guard requires CPU virtualization extensions?
I'm looking at the Defender Secure Score setting "Turn on Microsoft Defender Application Guard managed mode". I found an MS article to understand the requirements.
Upon reading the article, ...
- 117
0
votes
1
answer
500
views
Defender repeats quarantine operation endlessly in OneDrive temp folder
I get these notifications endlessly, every few minutes, basically forever and I don't know what to do about them. The name changes a little, but the notifications just keep coming forever. Is this ...
- 599
1
vote
0
answers
887
views
Windows 21H2 Defender Firewall Service not starting when Non-US language (set by registry key)
I have a problem with Windows Defender under Windows 10 Enterprise (21H2) with Cumulative Patch from 08 and / or 09 2022.
I created an offline Setup with Microsoft Deployment Workbench to install that ...
- 11
0
votes
0
answers
252
views
How to verify Windows Defender is running in Sandbox mode?
I ran this command as admin in Powershell:
setx /M MP_FORCE_USE_SANDBOX 1
restarted my system, then used process explorer and all I see is this:
there is no sign of "MsMpEngCP.exe" that ...
user1728941
0
votes
1
answer
317
views
What's the right way to deploy my signed WDAC policy to my test VM?
I'm using Hyper-V VM, Windows 11 22H2, to test signed WDAC policy, specifically the fact that even administrators can't disable/remove it, so I decided to try it out.
I've already successfully ...
user1728941
2
votes
2
answers
449
views
Why my WDAC policy created using Event Viewer logs based on FilePath rule isn't working?
I'm trying to understand why my WDAC policy is not letting the programs I allow-listed using Event Viewer logs, to run.
This is how I made my WDAC Policy allow list based on Event Viewer audit logs:
...
user1728941
0
votes
0
answers
47
views
What are the use cases of Application ID tagging or AppID tagging?
Microsoft offers AppID tagging through Windows Defender Application Control, it's called AppID Tagging:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-...
user1728941
0
votes
1
answer
344
views
How to enable/disable windows defender on schedule
I want to enable/disable Windows Defender via Task Scheduler. The reason I want this is because I'm running an automatic backup via Backup and Restore (Windows 7) option and it keeps failing because ...
- 101
0
votes
0
answers
65
views
Windows Defender Firewall, why these defaults?
For some time now these are the default settings WD propoes to me each time a process tries to connect to network for the first time.
The picture is in italian but it substantially asks for forbidding ...
- 111
0
votes
0
answers
215
views
I can't disable tamper protection because windows defender is missing
so to explain my problem : I have a version of windows with windows defender completely removed, if I try to access it through windows settings it just says "you need a new app to open the ...
- 1
0
votes
1
answer
542
views
How to adjust MsMpEng.exe (Windows Defender) scanning schedule when Task Scheduler has no effect?
Every day around 11 PM my CPU use goes to 100% and I hear fans spinning up. Task Manager shows it's C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe. Resource Monitor shows ...
- 1,531
0
votes
1
answer
594
views
I can't get Windows Defender Application Control policy working in Windows 11
On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced.
Here is the test policy I made:
<?xml version="1....
user1728941
0
votes
0
answers
841
views
How to prevent Sophos HitmanPro, Sophos Endpoint Defence, and Windows Defender High CPU with Visual Studio Code GIT operations
For a little over a week now I have been having high CPU usage issues by Sophos HitmanPro.Alert, Sophos Endpoint Defence and Windows Defender Advanced Threat Protection Service when performing GIT ...
- 113
0
votes
1
answer
549
views
Windows Defender Firewall Blocking Ping
My workstations use Windows Defender Firewall managed by local group policy. Every time I try to ping from this one workstation I receive "General Failure". When I turn the firewall off I ...
0
votes
1
answer
160
views
Clearing the Protection history (not the same as Detection history)
There is a Windows Defender feature that - separate from the malware detection history - notes restrictions for programs not already known to be intentionally dangerous, like Protected Folder Access (...
- 1
0
votes
0
answers
22
views
I can't turn on Windows 10 protection
In June I installed an optimizer called Smart Game booster, when I finished installing it I used it, but later I realized that Windows Defender was disabled.
It is the first time that the Antivirus is ...
0
votes
1
answer
58
views
Why isnt the windows 10 follina update dispatching?
For some reason, our devices have not received the windows 10 update that addresses the follina vulnerability since a month ago. This is making our exposure score look pretty bad...Why hasnt it been ...
- 111
0
votes
1
answer
2k
views
Trojan virus threat 'removed or restored'
I recently downloaded a file from a malicious website by mistake. It had a trojan virus with the name as following :-
Trojan.win32.Zapchast
My windows defender detected the threat and then quarantined ...
- 1
0
votes
1
answer
398
views
WIndows 10 - How to Enable Windows Defender Firewall with Forticlient installed
I have a remote job for which I occasionally have to use a VPN to connect to the corporate network. My company uses FortiClient for this, and despite Fortinet's best efforts, I've managed to break ...
0
votes
1
answer
192
views
Windows 10 Norton.exe Trying to Access Controlled Folders
I don't really know much about computers lol but this has been bothering me.
I turned on controlled folders a small while ago, just because I thought it was good to have on, and around the same time, ...
- 3
0
votes
0
answers
144
views
What should be in the Windows Defender, Diagnostics folder in the registry?
How many entries should there be?
One Windows 10 PC has 6 entries, another has 3, in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft Defender\Diagnostics.
Examples, from one machine:-
RollbackToPlatformVersion ...
- 87
0
votes
0
answers
907
views
Windows Defender Application Guard has no internet access
We are testing the use of Windows Defender Application Guard. It is enabled, and I can access it through the Edge Settings menu, but once on the application guard edge browser we seem to get no ...
- 11
5
votes
1
answer
4k
views
Exclude WSL 2 VM from Windows Defender
I'm trying to exclude my Ubuntu VM in WSL 2 running in an up to date Windows 11 Pro installation.
The problem is that my local build is terribly slow when Windows Defender is active.
Setup is as ...
- 51
1
vote
0
answers
866
views
How do you download the latest Windows Defender platform engine for offline PC, as well as the definitions?
How do you download the latest Windows Defender platform engine, as well as the definitions?
It is for computers that are not online yet, I would like to do this for both Windows 8.1 and Windows 10.
I ...
- 87
0
votes
1
answer
342
views
How can I prevent Windows Defender from using my computer's CPU on Microsoft Windows 10?
I use Microsoft Windows 10. I don't want to use Windows Defender. Therefore I disabled it, but it continues to use my computer's CPU. How can I prevent that?
Here's how I tried to disabled Windows ...
- 19.9k