Page 3 of 5 FirstFirst 12345 LastLast
  1.    02 Jun 2017 #20
    Join Date : Feb 2017
    Home
    Posts : 456
    Windows 10 Home x64, V1709 (16299.19)

    I'm glad you posted this one. Thanks. Not a day has gone by since I enabled this protection, but what I've wondered about it. Malwarebytes popped up a box about blocking some re-directed things before. But WD is not very informative about what's happening.
      My ComputersSystem Spec
  2.    02 Jun 2017 #21
    Join Date : Aug 2016
    S/E England
    Posts : 4,072
    10 Home x64 (1709) (10 Pro on 2nd pc)

    Quote Originally Posted by Bree View Post
    I presume it would be detected regardless of folder as soon as I ran the installer, but I haven't been brave enough to test that yet.
    That's what a 'test machine' is for (see My Computers, System Two).

    This exhibited the same behaviour for Defender, the installer was not detected as having a PUA when in the User folder, but was detected anywhere else. Running the installer from my user folder resulted in Defender blocking a PUA, this time it was found under a different name 'Spigot' but apparently it's the same thing...
    We have seen this application use the following file names:
    YTDSetup.exe
    https://www.microsoft.com/security/p...4&enterprise=0

    Interestingly, the installer was then allowed to run to completion. It installed the software successfully, apparently minus its PUA payload. Testing over, it's time to restore a system image, I think...
      My ComputersSystem Spec
  3.    02 Jun 2017 #22
    Join Date : Aug 2016
    S/E England
    Posts : 4,072
    10 Home x64 (1709) (10 Pro on 2nd pc)

    Quote Originally Posted by Bree View Post
    Is this behaviour by design, do you think?
    Apparently yes....

    How it works
    PUAs are blocked when a user attempts to download or install the detected file, and if the file meets one of the following conditions:
    • The file is being scanned from the browser
    • The file is in the %downloads% folder
    • The file is in the %temp% folder
    https://docs.microsoft.com/en-us/win...nder-antivirus
      My ComputersSystem Spec
  4.    1 Week Ago #23
    Join Date : Oct 2014
    Posts : 2,375
    W10 Pro + W10 Preview

    Hi Shawn
    For some reason Powershell suggestion in this tut does not work on my computer, though your REG File does.
    This in on Build 1703....see attachments.

    Click image for larger version. 

Name:	pref.JPG 
Views:	10 
Size:	38.5 KB 
ID:	156985
    Name:  regedit.JPG
Views: 65
Size:  27.6 KB
    Last edited by Brink; 1 Week Ago at 17:11. Reason: attached images
      My ComputersSystem Spec
  5.    1 Week Ago #24
    Join Date : Oct 2013
    Posts : 24,348
    64-bit Windows 10 Pro build 17017
    Thread Starter

    I just tested in build 16299.15, and it's still working for me.

    I noticed you have Kaspersky installed, and wonder if that may be related if it disabled Windows Defender.
      My ComputersSystem Spec
  6.    1 Week Ago #25
    Join Date : Oct 2014
    Posts : 2,375
    W10 Pro + W10 Preview

    Quote Originally Posted by Brink View Post
    I just tested in build 16299.15, and it's still working for me.

    I noticed you have Kaspersky installed, and wonder if that may be related if it disabled Windows Defender.
    I clean forgot I was trying out Kaspersky free only on the one computer out of four computers in the house.
    Still it appears odd that the REG file worked but not Powershell as Defender is turned off.
    Thank you for the explanation....would PUAP still work?
      My ComputersSystem Spec
  7.    1 Week Ago #26
    Join Date : Oct 2013
    Posts : 24,348
    64-bit Windows 10 Pro build 17017
    Thread Starter

    I'm not sure it will with WD turned off.
      My ComputersSystem Spec
  8.    1 Week Ago #27
    Join Date : Aug 2016
    Posts : 356
    Windows 10 64 bit, 1703

    Can this restrict us from downloading files that are detected as PUA's but are actually non harmful files? I enabled PUA protection for WD a while back but have just encountered my first issue with Display Driver Uninstaller being detected as a PUA and not downloadable. Are there any means to proceed with certain downloads anyway?
      My ComputerSystem Spec
  9.    1 Week Ago #28
    Join Date : Oct 2013
    Posts : 24,348
    64-bit Windows 10 Pro build 17017
    Thread Starter

    Hello Kol12,

    Not unless you temporarily disable PUA protection.

    Was the source of the uninstaller official, or from some third party site that may have repackaged it with the PUA?
      My ComputersSystem Spec
  10.    1 Week Ago #29
    Join Date : Aug 2016
    Posts : 356
    Windows 10 64 bit, 1703

    Quote Originally Posted by Brink View Post
    Hello Kol12,

    Not unless you temporarily disable PUA protection.

    Was the source of the uninstaller official, or from some third party site that may have repackaged it with the PUA?
    Hi Brink,

    It is the official DDU download page: Display Driver Uninstaller (DDU) V17.0.7.5 Released. - Wagnardsoft Forum

    I can't remember which method I used to enable PUA now but I will try to disable it to get this file and maybe mention something of it on Wagnard forums.
      My ComputerSystem Spec

 
Page 3 of 5 FirstFirst 12345 LastLast


Similar Threads
Tutorial Category
Security System Turn On or Off Windows Defender Real-time Protection in Windows 10
How to Turn On or Off Windows Defender Real-time Protection in Windows 10 Windows Defender helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC...
Tutorials
Hardware & Drivers Enable or Disable Disk Write Protection in Windows
How to Enable or Disable Write Protection for a Disk Drive in Windows Write protection (read-only) on a disk prevents the contents on the disk from being changed. There are many reasons for how a disk is write protected. This tutorial will...
Tutorials
How to Enable Windows Defender Adware Blocking in Windows 10
Read more: http://www.ghacks.net/2015/11/30/add-adware-protection-to-windows-defender/ SOURCE: Shields up on potentially unwanted applications in your enterprise - Microsoft Malware Protection Center - Site Home - TechNet Blogs
AntiVirus, Firewalls and System Security
Turnoff Real-time protection in Windows Defender make Windows 10 error
Turn off real-time protection in Windows Defender make Windows 10 Version 1511 VL (both Professional and Enterprise) not working, black screen and I have to shutdown laptop by pressing power button. I tested many times with fress installed...
AntiVirus, Firewalls and System Security
Solved Disable Windows Defender Real-time protection but keep the app working
Hi, how can I disable Windows Defender Real-time protection but keep the Windows Defender app available and working? I've seen ways to disable Windows Defender Real-time protection in W10, however this involved disabling Windows Defender as a...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:35.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums