Windows 10: Ongoing False Positive Detections by Microsoft Defender for Widely Used Program

My program has been used by over 600,000 people for several years without any false detection issues. However, since around July 15th, the program is being falsely detected by Microsoft Defender. Even after de-obfuscation, the false detections persist. The program is also properly signed.I have made several requests to Microsoft Defender for release by providing details about the situation. While these requests have resolved the issue for the specific file link provided, the same file is falsely detected again when uploaded to another location.The response I received stated: "At this time, the

:)

 

database of malware producing false positives or false negatives

Many months ago I communicated with Malwarebytes about a trojan that was detected by Defender that was not detected by Malwarebytes. They indicated that Microsoft Defender is likely a false positive and to wait weeks or months for Microsoft to update their
database. To date the Defender continues to detect a trojan that is not detected by Malwarebytes.

Defender does not detect any malware on quick scans. However on full scans it detects this trojan that is not detected by Malwarebytes.

How does an end user determine whether one antivirus program is producing false positives or false negatives?

 

Windows Defender Bug - False Positive

Hello AliBpm,

Welcome to the Microsoft Community!

Thank you for posting your request for help. Based on your description, I understand that you have already submitted the false positives for the application you are using on your own computer, and the problem no longer occurs on your computer. However, other computers in your company have not submitted this feedback, so the issue of false positives in Windows Defender still exists in other computers. I would like to offer you the following solution to your problem:

• Please ask the members of your workgroup to follow your process to submit the false positives once in their computers.
  

• If you are the IT person in your company or you can contact your IT person, you can try to submit the file in Submit files in Microsoft Defender for Endpoint so that the devices under your company's domain will no longer receive the threat alerts caused by the secure exe file after receiving the false positives submission. Please refer to the links below: Submit files in Microsoft Defender for Endpoint.
  

Hope this helps you. Looking forward to your reply we will also adjust and improve the solution for you based on your reply.

Best Regards,

Zhang Yang - MFST | Microsoft Community Support Specialist

 

Why does Windows Defender not understand "False Positive"?

Almost daily now, I've had to clear a "threat" from Defender's "actions needed" list on a specific program that is a false positive.

How do I make it work as expected?