Windows 10: Unable to remove exclusions files and location (Either in Safe mode run Windows Defender or...

I try to follow PowerShell install module also cannot.







* The virus already removed. I try to using Bit Defender, herd Protect Scanner & Reason Core Security before






I cannot find any value in Registry Editor



:)

 

Unable to Remove Exclusions from Windows Defender

Thank you for posting back. If you trust a file, file type, folder, or a process that Windows Defender Antivirus has detected as malicious, you can stop Windows Defender Antivirus from alerting you or blocking the program by adding the file to
the exclusion list. It seems that it was added automatically. We suggest that you follow these steps:

• Go to Settings and select Update & security.
• Click Windows Defender.
• Look for Exclusions and select Add an exclusion.
• Navigate to the file, folder, or process, and select Exclude this file.

If the steps provided did not work, we recommend that you boot your device to
Safe Mode and redo the process.

Let us know if you need further assistance.

 

Windows Defender - How to remove exclusions automatically generated by Windows Defender

So, if a threat is quarantined and then restored, an exclusion that doesn't appear in the exclusions list is automatically created to avoid re-quarantining the same file next time it's run. That is great, however the exclusion is un-removable from defender
/ registry. In the registry, it it located in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\TemporaryPaths

I was not able to remove that key with multiple methods:

- deleting from regedit simply says "Error Deleting Values" - unable to delete all speciefied values

- safe mode (regedit) - same thing

- I tried changing permissions for TemporaryPaths (changed owner to myself, changed perms so I have full control), permissions changed, still can't delete

- cmd as admin & reg delete - Access is denied

Is there a way to remove that exclusion? As it is now, any program I take & rename to whatever the exclusion is - it will run without being scanned. Pretty sure that's not very nice, since everyone has read permissions on the TemporaryPaths key, and since
they can't be removed any malware can simply place itself in one of the values in TemporaryPaths and run happily.

 

Add or Remove Windows Defender Exclusions in Windows 10


Hello Brink,

I was wondering if you can help me please.

I have selected certain file types / folders and locations in Windows Defender on Windows 10 that were added to the exclusions lists...

Previously I could go to Windows Defender and see what files, folders or extensions I had excluded but now they have disappeared....

All I see is the add buttons which work as intended when I want to add a folder etc etc....
But then they are not listed anywhere so that I can remember what I have excluded or not....

Can some one please help me so that they are visible again, is there a setting in the registry that needs to be fixed?

This is what I should see where, below the red arrows I should see the excluded files/folders including their path etc etc [see image below]



but I see nothing..

Yet if i go to the registry as indicated below...

File and file location exclusions are stored in the registry key below.

*Arrow HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths

File type exclusions are stored in the registry key below.

*Arrow HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions

Processes exclusions are stored in the registry key below.

*Arrow HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes

they are all listed there....?

I have to say that windows defender is excluding folders/files and etc etc, that I have selected during its scans, but I cant see the excluded items in the Windows Defender as per image of my Exclusions section below...





Thanking you in advance for your support and assistance on this issue....

Cheers