Windows 10: Virus disables windows defender; can't remove exclusions from windows defender

So, today when i started my pc a pop up appeared from Windows Powershell similar to the ones you get when installing something that requires admin approval. I clicked no, it popped again and again until i said yes. Later i noticed that my virus and threat protection was disabled in windows defender, and i turned it back on.

Today i did a full scan and found multiple threats, and removed them. After that, i went to allowed threats and removed everything, but it was useless. As soon as i left the menu they were back there. I went into the exclusions page and there they were, but the remove button was greyed out and i couldn't press it. Went into regedit and found that everything in the exclusion folder was empty( there were no exclusions in regedit). I restarted my pc after an attempt in safe mode to remove them which failed. After that i manually deleted the folders(looked at the paths and went in the location ans deleted them) I restarted my pc and the powershell thingy popped up again. I clicked on detail, and, well, you can see for yourself. http://imgur.com/a/XXKfdl8 It disables virus ans threat protection, adds rundll32.exe and dll file as exclusions and disables another procces called mapsreporting, which seems to be some sort of procces that sends information to microsoft.

What i find incredibly odd is that the instructions to do these things are set like the type of instructions you put on an exe shortcut, but they are somehow applied directly on the exe. I went to that path and found only the single powershell.exe, without a shortcut(i can also see hidden files). My question is: does anyone have any clue how to fix this? Any help, no matter how small, would be very much apreciated. I have also just installed the bitdefender antivirus plus trial and i am doing a full scan as i am typing this, but i am sure it will find nothing, as it has already scanned my entire C drive and found nothing. Sorry if i have any mistakes, english is not my first language. Here are my pc specs if it matters: R5 3600, GTX 1660, 16gb ram 2400mhz stock oc @2666, intel 660p nvme ssd 512gb as my C drive, a P300 Toshiba 3Tb hdd and an old 2.5 inch 1tb laptop hdd. Windows 10 Pro 20H2 ( build 19042.746)

submitted by /u/Barahuda
[link] [comments]

:)

 

Unable to Remove Exclusions from Windows Defender

Thank you for posting back. If you trust a file, file type, folder, or a process that Windows Defender Antivirus has detected as malicious, you can stop Windows Defender Antivirus from alerting you or blocking the program by adding the file to
the exclusion list. It seems that it was added automatically. We suggest that you follow these steps:

• Go to Settings and select Update & security.
• Click Windows Defender.
• Look for Exclusions and select Add an exclusion.
• Navigate to the file, folder, or process, and select Exclude this file.

If the steps provided did not work, we recommend that you boot your device to
Safe Mode and redo the process.

Let us know if you need further assistance.

 

Windows Defender Released

Microsoft has released the final version of its Windows Defender anti-spyware utility. Windows Defender is a product of the Microsoft acquisition of GIANT Software. Previously known as Windows AntiSpyware, after a two years beta period it's now available for Windows XP and Windows Server 2003 under the name Windows Defender. Windows Defender incorporates Real-Time Protection to monitor systems for spyware activity, automated spyware removal with scheduled scans, full integration with Internet Explorer 7.0 and automatic spyware definition updates from Microsoft. Windows Defender is available freely to all customers running a genuine copy of Windows. Microsoft has also announced that customers will each be allowed to report two support incidents for free with Windows XP and Windows Server 2003.

Source: DailyTech

 

Windows Defender Antivirus Scan exclusions

If there is anything in Windows Defender Exclusion list, then it won't be scan and if it is malicious program, it won't detect.

It is better to remove all programs from exclusion list (if you didn't add them) and run a full system scan with Windows Defender.