1.    12 Aug 2016 #1
    Join Date : Aug 2015
    Posts : 26
    Microsoft Windows 10 Pro N 64-bit 10240 Multiprocessor Free

    severe threat is windows defender?! What?!


    I dont get it is this false positive?

    Click image for larger version. 

Name:	Capture.PNG 
Views:	3 
Size:	110.7 KB 
ID:	95775
      My ComputerSystem Spec
  2.    12 Aug 2016 #2
    Join Date : Aug 2015
    Posts : 26
    Microsoft Windows 10 Pro N 64-bit 10240 Multiprocessor Free
    Thread Starter

    I actually scanned with malwarebytes and found nothing yesterday
      My ComputerSystem Spec
  3.    12 Aug 2016 #3
    Join Date : Feb 2014
    Posts : 487

    Quote Originally Posted by Cromax View Post
    I dont get it is this false positive?
    Personally I would select the 'Remove all' option, as it looks positive to me. This isn't the Windows Defender application itself, as that's located in C:\Program Files\Windows Defender\.

    At a guess, I think the bottom location (FilesStash) is probably the location where Windows Defender is storing the file that it has quarantined.

    The top location (LocalCopy) is where Microsoft has made it's own copy of the suspicious file, in order to prepare and send a copy of the file to Microsoft for sample submission and evaluate the file.

    When I've had Windows Defender ask to send a sample file submission to Microsoft before, it makes it's own copy of the suspicious file. It then sends the files listed below to watson.telemetry.microsoft.com.nsatc.net, which ties in with the location in your screenshot:

    \\?\C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{Identifier Number}-Filename.exe
    C:\Users\USER\AppData\Local\Temp\MPSampleSubmit\client_manifest.xml
    C:\Users\USER\AppData\Local\Temp\WER1C6.tmp.WERInternalMetadata.xml

    You can read about the file that has been quarantined by Windows Defender here:
    Trojan:Win32/Spursint.A!cl
      My ComputerSystem Spec
  4.    12 Aug 2016 #4
    Join Date : Aug 2015
    Posts : 26
    Microsoft Windows 10 Pro N 64-bit 10240 Multiprocessor Free
    Thread Starter

    yeah i removed it
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Windows Defender Stuck on Removing Severe Threat
I scanned my PC's with this Microsoft Safety Scanner - Free Virus Scan with the Microsoft Safety Scanner The scan found a lot of malware and removed all but three items - severe - and i read that Windows Defender would complete the job/remove...
AntiVirus, Firewalls and System Security
Windows Defender Advanced Threat Protection (ATP) - for consumers?
Just wondering if there is any way that consumers like us can enroll in this service? WDATP - Windows Defender Advanced Threat Protection
AntiVirus, Firewalls and System Security
Windows Defender Advanced Threat Protection Preview Expands
Source: Windows Defender Advanced Threat Protection Preview Expands | Windows For Your Business
Windows 10 News
Announcing Windows Defender Advanced Threat Protection for Enterprise
Source: Announcing Windows Defender Advanced Threat Protection | Windows Experience Blog
Windows 10 News
Does Bit Defender Prohibit Windows Defender From Being Activated Too ?
Hello. Using BitDefender. Cant seem to activate Windows Defender (also). Does Bit Defender prohibit Windows Defender from being activated ? Any idea why I can't activate ? Assuming I can, somehow, do I want both ?
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 21:41.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums