Windows 10: Permanently stopping a recurring false positive?

Discus and support Permanently stopping a recurring false positive? in AntiVirus, Firewalls and System Security to solve the problem; Ever since I switched back to Microsoft Defender Antivirus in January after Xfinity stopped offering Norton for free, I have been receiving a... Discussion in 'AntiVirus, Firewalls and System Security' started by RBBrittain, Apr 18, 2021.

  1. Permanently stopping a recurring false positive?


    Ever since I switched back to Microsoft Defender Antivirus in January after Xfinity stopped offering Norton for free, I have been receiving a persistent false positive on the file C:\Windows\Temp\cpnprt2x64.cid. It has been variously detected at different times as Adware:Win32/Coupons most commonly, PUA:Win32/Presenoker, and App:CouponarificAds.


    I consider this detection to be a false positive. I have reviewed the binary; it is a component of the Coupons.com printing application, which is activated only if you visit a coupon printing website and is required to print secure paper coupons online that most brick & mortar stores will accept. The vast majority of grocers and similar chains that accept manufacturers cents-off coupons now contract with Coupons.com to provide secure, printable online coupons. As Coupons.com coupons are almost always requested by the consumer, the software should NEVER be classified as "adware" or any other kind of malware.


    I have flagged all three detections as "allowed threats" in Defender. However, Defender CONTINUES to flag this file as a virus and constantly attempts to notify me about it, quarantine it and/or remove it entirely. It is Defender that is engaged in unwanted activity, NOT this file. How do I PERMANENTLY stop Defender from treating this file as a virus?

    :)
     
    RBBrittain, Apr 18, 2021
    #1

  2. defender false positive

    Hi Bob,

    To better assist you, kindly verify the following:

    • Where did you submit the file about Windows Defender being false positive?
    • Right after the recent Windows 10 update, your Zara Radio stopped working?
    • Regarding the 404 error, what application were you using when you got that error?

    Let us know.
     
    Joanna 777, Apr 18, 2021
    #2
  3. Snixtor Win User
    False positive for desktop shortcut scanner.lnk

    The 1.239.488.0 virus / spyware definition update that rolled out about 24 hours ago appears to be producing a false positive for any shortcut placed on the desktop called "Scanner.lnk". I can consistently replicate a false positive for Trojan:Win32/FakeSysdef
    with the following steps.

    • Create a shortcut to an exe file.
    • Place the shortcut on the desktop.
    • Name the shortcut "Scanner".
    • Run "Quick Scan".
    I don't get the same result by directly scanning the file, nor by uploading the file to www.virustotal.com, so it would appear this is as a result of a heuristic rather than a file content analysis. I also don't get the same result with a shortcut that links
    to a website.

    Can anyone else replicate? How can we go about getting the Windows Defender team to reconsider this heuristic? It's a bit heavy-handed.
     
    Snixtor, Apr 18, 2021
    #3
  4. Permanently stopping a recurring false positive?

    Questioning a false positive for a Windows Defender virus scan

    Anytime you suspect a possible
    false positive
    or you want a second opinion, submit it to one of the online services that analyzes suspicious files. There are also number of web resources (URL Link Scanners) which can be used to check suspicious/unfamiliar
    sites or get second opinions.

     
    quietman7 - MVP, Apr 18, 2021
    #4
Thema:

Permanently stopping a recurring false positive?

Loading...
  1. Permanently stopping a recurring false positive? - Similar Threads - Permanently stopping recurring

  2. is this a false positive or no?

    in Windows 10 Ask Insider
    is this a false positive or no?: [ATTACH] submitted by /u/GloomyMusician24 [link] [comments] https://www.reddit.com/r/Windows10/comments/lb83rc/is_this_a_false_positive_or_no/
  3. False positive for: TrojanDropper:PowerShell/Cobacis.B

    in AntiVirus, Firewalls and System Security
    False positive for: TrojanDropper:PowerShell/Cobacis.B: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=TrojanDropper:PowerShell/Cobacis.B&ThreatID=2147767223 #example.ps1 function Cript$Key, $Text { $x=0; $y=0; $CriptStr=''; for$x=0;$x -lt $Text.Length; $x++{ $y =...
  4. Wacatac false positive

    in AntiVirus, Firewalls and System Security
    Wacatac false positive: Ok so i downloaded a simple vbs script that i created myself after i reset my pc. All it does is create a message box that can only be closed with task manager. Just today, i got a notification saying threats found and it said wacatac or something. How could a trojan enter...
  5. Trojan.Chapac.A False Positive?

    in AntiVirus, Firewalls and System Security
    Trojan.Chapac.A False Positive?: When Windows Defender cannot detect Trojan.Chapac.A but SpyHunter does then is this a false positive by SpyHunter? https://answers.microsoft.com/en-us/protect/forum/all/trojanchapaca-false-positive/11ebe256-d34d-4b15-ac28-2dff411c6975
  6. False Positive - Trojan:PDF/Phish.F

    in AntiVirus, Firewalls and System Security
    False Positive - Trojan:PDF/Phish.F: Virus & Threat Protection has suddenly decided that a PDF copy of a receipt from 11 months ago, is a trojan. It is a plain PDF except that it has an email address as a link. Otherwise a quite boring PDF. How do I tell Microsoft about this false positive? Anyone else...
  7. Windows Defender False Positives

    in AntiVirus, Firewalls and System Security
    Windows Defender False Positives: I received an alarming message from WD which says all antivirus providers are disabled, which I think was a false positives. So I went on a check. And the result: [ATTACH] Protection is on, license is active and my firewall is on too. Can you tell why that message is...
  8. Possible False Positive?

    in AntiVirus, Firewalls and System Security
    Possible False Positive?: Hello! I've been trying to figure this out all day; on my desktop earlier today, Windows defender flagged a file associated with the Immersive Control Panel - 'Control Panel a.k.a. ControlPanel.settingcontent-ms' - as 'Trojan:O97M/DPlink.A' in my user files and in the...
  9. Adwcleaner 6.044 False positive

    in AntiVirus, Firewalls and System Security
    Adwcleaner 6.044 False positive: I received a false positive for C:\Windows\System32\drivers\Tap0901.sys today, checked on Totalvirus and confirmed as ok. Detection ratio: 0/60 Mike 79067
  10. False negative or false positive ?

    in Windows 10 Performance & Maintenance
    False negative or false positive ?: Win 10 Home 10586.164 Did a Sfc /scannow. Result : found corrupted files but unable to repair some of them. Did a dism..../restorehealth. Result : Restore operation successful. Did a sfc /scannow right after dism. Result : found corrupted files but unable to...