Windows 10: I don't know if I'm experiencing a false positive: VirTool:Win32/DefenderTamperingRestore

Windows Defender keeps finding this threat VirTool:Win32/DefenderTamperingRestore, it's been about a month, and I just kept running the quick/full scan everyday, removing it or quarantining it which it does by itself mostly, of course, also using MSERT: the first time I used it full scan, it didn't take much it did not find anything.Yesterday I performed a full scan with the normal Defender, as I'm doing almost every day and SURPRISE that's what it found in a random folder: Trojan:script/sabsik.fl.a!ml.I clicked on remove, and I also removed the folder manually because I didn't need it, an

:)

 

Win32/DefenderTamperingRestore

Hi there.

Anybody can help me with how to clean my computer from this virus:
Win32/DefenderTamperingRestore

Usually, when I run MSERT.exe it says that this virus was eliminated. But I have some questions:

a) Is it a memory-resident malware?

b) Is it launched in my computer startup?

c) Or is it activated when I run some software. How can I know which software is launching it? I guess that MSERT must know.

d) Where it is located?

e) How can I delete it?

f) FINALLY.......IS IT DANGEROUS? (For example, Is my computer safe to use it with my credit card payments)

Regards

Hernán Covarrubias

Mobile: +569 9870 3539

Private mail: *** Email address is removed for privacy ***

 

False Positive by Windows Defender ? Win32/Critet.BS

@G_963

Found thread in ZHPCleaner forum.

Dectection du trojan :Win32/Critet.BS

Dectection du trojan :Win32/Critet.BS

Updated Windows Defender definitions to 1.263.740.0 and downloaded ZHPCleaner from author's site. It passed security scan so hopefully the issue has been resolved with false positives.

Try manually updating through Windows Defender Security Center - Virus and Treat Protection Updates and determine if supercopier is still detected.

~

 

Avast: False Positive Much?

In these days you can't really trust anyone's word without inspecting. Hacked servers with injected binaries, viruses that infect compiler resources (these are cool, programmers even slam digital signatures over them -> Win32:Induc virus) etc...

But if you suspect it's a false positive made by avast!, let me know and i'll inspect it.