Windows 10: Gallery.exe file detected as threat by Windows Security

Hello everyone,For the past few months I've been constantly getting a notification from Windows Security that it found threats, and it's always this Gallery.exe file located in AppData/Roaming directory. If I click remove or quarantine or whatever, it seems like Windows Security can't remove it and I keep getting the same notification. I'm not sure where that could have come from, but I suspect it was when I sent my laptop to a repair shop in January for a repaste, and the guy there installed some weird "disk health checker" software with anime figures everywhere in the app, and he's showing i

:)

 

how to view exempted files from threat detection in windows security?

I have latest windows security version on windows 11.

I am unable to view the list of files that I have exempted from threat detection in past .

How to bring some of those files again in threat list?

 

Threats detected by Windows Defender

Hello @AdvancedSetup, When I click on View detailed results of the scan:

I get this list of infections found:





Finally, I attach the reports:

 

Windows Security | Allowed Threats | Issue

Hello linax3

Welcome to the Microsoft Community.

Having a threat repeatedly detected by Windows Security even after it has been set to the allowed list can be frustrating and may indicate a few possible issues.

Here are some steps you can take to troubleshoot and potentially resolve this issue:

1. Update Windows Security: Ensure your Windows Security is up to date. Although you've mentioned your security intelligence version, Microsoft frequently releases updates to improve detection and handling of threats. You can check for updates by going to the Windows Security app > Virus & threat protection > Check for updates under Virus & threat protection updates.
   
2. Review Allowed Threats: Double-check the allowed threats list to ensure the threat was properly added. Sometimes, the threat might be slightly different each time it is detected due to variations in its signature, causing Windows Security to treat it as a new threat. You can review and manage allowed threats in the Windows Security app under Protection history.
   
3. Investigate the Threat: It's important to understand why this threat is repeatedly detected. It might be part of a legitimate program you're using, but it's also possible it's an unwanted program that keeps reinstalling itself or changing its signature. Use the details provided by Windows Security to research the threat and understand its nature and origin.
   
4. Perform a Full Scan: Run a full system scan using Windows Security to ensure no other related threats are present on your system. Sometimes, a recurring threat is just a symptom of a more significant issue.
   
5. System Integrity Check: Run a System File Checker (SFC) scan to ensure your system files are intact and not corrupted. You can do this by opening Command Prompt as an administrator and typing sfc /scannow.
   

Remember, it's crucial to ensure that allowing a threat is the correct course of action. Sometimes, what seems to be a false positive could be a legitimate threat to your system's security.

If there is anything not clear or I can't understand your problem, please do not hesitate to let me know.

Best Regards

| Microsoft Community Support Specialist