Windows 10: I found an allowed threat called Program:Win32/Uwamson.A!ml in my windows defender.

I found an allowed threat called Program:Win32/Uwamson.A!ml in my windows defender. I quickly removed it in a panic and did multiple scans with Malwarebites and Windows defender. It doesn't detect anything now, but I don't know how long it was there because I didn't get a warning. Is this a false postive? I couldn't see what file or .exe it came from. I don't know if this is related but earlier today I had a BSOD with code: MEMORY_MANAGEMENT. This caused me to look in my windows defender and that's how I found the threat. I haven't suffered from a BSOD in a long time and I had my pc on for a w

:)

 

Windows defender false positive - forced to allow threat

Windows defender has started to identify C:\Windows\System32\mshta.exe as a threat [normally reported as a Trojan Powessere.G]. I use mshta.exe to run an hta custom MsgBox - I have been hoping to keep using my current CustomMsgBox tool [batch file calling a vbs-hta file] until later this year when I hope to have had enough time to replace it with a PowerShell alternative.

Windows defender's notification lets me "allow the threat" but that seems to me to be a bigger security hole than is necessary - it will now ignore a potentially real intrusion when all I want to run is a genuine Windows component. My immediate problem is fixed but I would prefer to fix the false positive using the exclusions list.

I cleared the 'Allowed threats history' so I could use the exclusions list instead. I added C:\Windows\System32\mshta.exe to the file exclusions list and I checked that it had taken properly by checking the exclusions list both in the UI & in the Registry. But the exclusion made no difference, it continued to detect and block the exe.

I have repeated the attempt several times [by clearing the allowed threats list & exclusions list beforehand] and the results are the same every time
- allowing the threat works,
- using the exclusions list has no effect.

I studied the relevant tutorial but have not spotted an error in what I have been doing - Add or Remove Windows Defender Exclusions

Does anybody with experience of using the exclusions list to counter false positives have any suggestions for me?

Denis

 

the windows defender is showing a threat Win32/Vigua.A

the windows defender is showing a threat Win32/Vigua.A

 

Deleted win32/wacapew.c!ml now having issues.

With a new computer that we got from a prebuilt company that had been refurbished, got everything set up and updated and such and then went into windows security/defender after rebooting the system. Did a scan after becuase there was a lot of bloat and adware
stuff that we removed ourselves, and the only thing that came up on the scan was a file called win32/wacapew.c!ml which the defender system marked as a threat, and after having defender remove the file, we restated the computer and now it stays on a black
screen after the windows logo and loading circle of dots. Any help?

PC is a Dell, only other program of note is Malwarebytes, and the regular stuff that comes on the system.

I currently have the system attempting an automated repair (via boot cycle interrupting 3 times) on the reccomendation of a friend, will keep posted!