Windows 10: Windows Defender Allow App With Temporary File Path

Greetings,We've got some software in the office that has a support feature which allows the end user to download a remote connection application for the third-party software company tech to assist. When you click on the "assist me" button in the application it takes you to a URL where it downloads software called Support-LogMeInRescue.exe.When the application starts, and the third party tech initiates the remote session the end users get a Windows Security Alert box, Windows Defender Firewall has blocked some of these features which requires an IT staff member to put in their credentials to al

:)

 

Windows defender does not allow for me to unquarantine items

Hi Michael,

The Real-time protection feature of Windows
Defender stops malware from running on your device. It's possible that this feature is preventing the system from restoring/allowing the affected program. If you're sure that the affected program is virus free, we suggest that you disable the
feature temporarily and try to restore the program. To do this, follow the steps below:

• Type Windows Defender settings in the search bar and press
  Enter.
• Under Windows Defender, disable
  Real-time protection by clicking the toggle button.
• Once you're done, restore the affected file/program and check if the issue persists.

Also, you can allow a quarantined file/program from the Windows
Defender desktop app. If you have the app installed on your device, you can follow these steps:

• Type Windows Defender in the search box, and then select the Desktop app.
• Under the History tab, click on the check box for the affected file/program.
• Select Allow item.

We'll appreciate if you can send us an update.

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.

 

Defender Firewall will not save "allowed app" rules

I am having a persistent, ongoing problem with allowing apps through Windows Defender Firewall (Windows 10 Pro 1809). Basically, the firewall is not remembering when I add an app to the list.

From the control panel I am going to "Allow apps to communicate through Windows Defender Firewall". One of the apps in question is already listed and I need to continually enable it through the Public connection. But the rule doesn't stick.

Another app is missing from the list so I manually add it, and things work fine for that session. If I restart the system and go back to these rules, the manually added app is no longer in the list, and the already present app in the list has again reverted to Private only. I have to constantly reset these.

Why won't these apps stick in the allowed apps, and how do I fix it?