Windows 10: Threat Detection Removed or Restored and Allow

Discus and support Threat Detection Removed or Restored and Allow in AntiVirus, Firewalls and System Security to solve the problem; My windows virus and threat protection software picked up on this: HackTool:BAT/AutoKMS Then from actions ı select remove it.Now it shows removed.But... Discussion in 'AntiVirus, Firewalls and System Security' started by Buluthan, Mar 21, 2020.

  1. Buluthan Win User

    Threat Detection Removed or Restored and Allow


    My windows virus and threat protection software picked up on this: HackTool:BAT/AutoKMS

    Then from actions ı select remove it.Now it shows removed.But ı can still see it on windows defender past and its status is removed.

    Does it mean ı am safe now and the file that makes problem removed from my computer? Waiting for your answers...

    :)
     
    Buluthan, Mar 21, 2020
    #1
  2. gagagaON Win User

    Is restoring a quarantined threat the same as allowing the threat?

    My Windows defender scan reported a threat last week. I quarantined it. After a few days, I updated my defender virus definitions, restored the threat, and ran another scan (because I wanted to find out if it was a false positive). This new scan did not
    report any threat.

    However, under defender's threat history, allowed items, I see this threat listed. I do NOT want to allow the threat, just wanted to find out if the latest definitions would still reported the file as a threat. How should I do that? Thank you. I am using
    windows 10.
     
    gagagaON, Mar 21, 2020
    #2
  3. Try3 Win User
    Windows defender false positive - forced to allow threat

    Windows defender has started to identify C:\Windows\System32\mshta.exe as a threat [normally reported as a Trojan Powessere.G]. I use mshta.exe to run an hta custom MsgBox - I have been hoping to keep using my current CustomMsgBox tool [batch file calling a vbs-hta file] until later this year when I hope to have had enough time to replace it with a PowerShell alternative.

    Windows defender's notification lets me "allow the threat" but that seems to me to be a bigger security hole than is necessary - it will now ignore a potentially real intrusion when all I want to run is a genuine Windows component. My immediate problem is fixed but I would prefer to fix the false positive using the exclusions list.

    I cleared the 'Allowed threats history' so I could use the exclusions list instead. I added C:\Windows\System32\mshta.exe to the file exclusions list and I checked that it had taken properly by checking the exclusions list both in the UI & in the Registry. But the exclusion made no difference, it continued to detect and block the exe.

    I have repeated the attempt several times [by clearing the allowed threats list & exclusions list beforehand] and the results are the same every time
    - allowing the threat works,
    - using the exclusions list has no effect.

    I studied the relevant tutorial but have not spotted an error in what I have been doing - Add or Remove Windows Defender Exclusions

    Does anybody with experience of using the exclusions list to counter false positives have any suggestions for me?

    Denis
     
  4. gagagaON Win User

    Threat Detection Removed or Restored and Allow

    Is restoring a quarantined threat the same as allowing the threat?

    Thanks XP. My exclusion list is empty, and the only options on my threat history are "allow" and "clear history" (please see my screen shot above). How do I tell if I have whitelisted the threat please? Thanks.
     
    gagagaON, Mar 21, 2020
    #4
Thema:

Threat Detection Removed or Restored and Allow

Loading...
  1. Threat Detection Removed or Restored and Allow - Similar Threads - Threat Detection Removed

  2. Threat Detection Removed or Restored

    in AntiVirus, Firewalls and System Security
    Threat Detection Removed or Restored: My windows virus and threat protection software picked up on this: HackTool:BAT/AutoKMS Then from actions ı select remove it.Now it shows removed.But ı can still see it on windows defender past and its status is removed. Does it mean ı am safe now and the file that makes...
  3. Threat Detection in Windows Defender Removed or Restored ?

    in AntiVirus, Firewalls and System Security
    Threat Detection in Windows Defender Removed or Restored ?: My windows virus and threat protection software picked up on this: SoftwareBundler:Win32/Prepscram and said it was "Removed and Restored." I assume that means the threat was quarantined, then removed, then the file it affected was restored. When ı click only option to make...
  4. Virus Threat Detected

    in AntiVirus, Firewalls and System Security
    Virus Threat Detected: Windows Defender 10 has detected multiples of this virus, virus:VBS/Redlof.A Windows Defender doesn't seem to have the ability to remove or quarantine this virus. I have also tried Defender offline. All that happens is my computer reboots and that's it. Does anyone have a...
  5. severe threat detected

    in AntiVirus, Firewalls and System Security
    severe threat detected: I'm getting a severe virus threat that continually is trying to load. Defender cleaned most of them except this one: [ATTACH]What should I do about this? https://answers.microsoft.com/en-us/windows/forum/all/severe-threat-detected/c98323e0-f01b-4a61-ba62-6a6c9aa3cf48"
  6. Windows Defender detected threat but unable to remove

    in AntiVirus, Firewalls and System Security
    Windows Defender detected threat but unable to remove: Hi community, My windows defender just found a threat in my com: Threat detected: Program:Win32/Wacapew.B!ml Alert Level: Medium Category: Potentially Unwanted Software Details: This program has potentially unwanted behavior Affected items: file:...
  7. Allowed threats file location

    in AntiVirus, Firewalls and System Security
    Allowed threats file location: Windows Defender routinely forgets what "threats" I've allowed and tries to take action against them again. I've resorted to forcing Defender to ask for input before quarantining stuff by itself, but I'd rather solve the issue on a deeper level. Where is the list of...
  8. Threat Detection (Removed or Restored)

    in AntiVirus, Firewalls and System Security
    Threat Detection (Removed or Restored): Hey, My windows virus and threat protection software picked up on this: VirTool:Win32/DefenderTamperingRestore and said it was "Removed and Restored." I assume that means the threat was quarantined, then removed, then the file it affected was restored. Am I correct? This...
  9. Windows Defender and Allowed Threats

    in AntiVirus, Firewalls and System Security
    Windows Defender and Allowed Threats: So the issue that I am having is that I have some stuff running on my my PC that technically is a virus but it has a specific purpose and I want it to run. I repeatedly have to restore the files and allow them. It happens at least 2-3 times a week....
  10. Is restoring a quarantined threat the same as allowing the threat?

    in AntiVirus, Firewalls and System Security
    Is restoring a quarantined threat the same as allowing the threat?: My Windows defender scan reported a threat last week. I quarantined it. After a few days, I updated my defender virus definitions, restored the threat, and ran another scan (because I wanted to find out if it was a false positive). This new scan did not report any threat....