Page 5 of 5 FirstFirst ... 345
  1.    06 Oct 2017 #40
    Join Date : Oct 2017
    Posts : 2
    windows 10

    when i click the remove button it just goes back all of the items in the screen shot are the items i want to remove
      My ComputerSystem Spec
  2.    06 Oct 2017 #41
    Join Date : Oct 2013
    Posts : 26,547
    64-bit Windows 10 Pro build 17074
    Thread Starter

    In that case it very well could be malware. It would be best to create a new thread for this in our AntiVirus, Firewalls and System Security forum area for more specialized help.
      My ComputersSystem Spec
  3.    24 Oct 2017 #42
    Join Date : Oct 2017
    Posts : 1
    win10

    @Brink

    An answer to why you might exclude something from Defender scans:

    a) Legitimately: Sometimes there are train crashes when Defender examines itself
    Therefore, you might temporarily add exceptions to [folders]:
    C:\Program Files\Windows Defender
    C:\Program Files\Windows Defender Advance Threat Protection
    and there may be some other special cases, if you know what you are doing & the risks involved.

    b) You are a cunning malware writer, and you want to stop your victims from scanning your evil concoctions.

    Even if you employ (a) as a matter of course, it is advisable to check exclusions periodically (in particular after any malware managed to get through)
    I suppose it's possible the even the Defender files could be compromised, so from time to time re-enable the scans of Defender itself, and scan them. Just to be on the safe side.
    { Hint: You can set your favourite keys as 'favorites' in regedit, and use them just when you do a full scan }

    As for (b), malwares often seek to hide from Defender by registering themselves as exclusions. Naughty malwares!
    Often, but not always malwares have rather silly codified names, but sometimes the hide in plain sight as reasonable-looking things like "MySafetyScan" (please don't sue me!).

    Third-party scanners, trustworthy online scanners, are less easily fooled. But do be careful to avoid fake scanners that just bring more malwares! { I currently use freewares ESET online, Emsisoft, Malwarebytes etc - your mileage may vary. And use adware scanners. }

    There are two distinct ways in which Defender exclusions (files or folders) are registered:
    1) as direct Defender exclusions
    2) as 'Policy' exclusions (security, management)

    Both can be solved with regedit, the registry editor (be careful !! - it's a good plan to back up the registry before proceeding !!).
    {You will already know to [winkey], enter "regedit", etc, and to install regedit if you don't have it}

    The former (1) are likely to be found in this registry key { burrow down carefully, checking for accuracy as you go! }
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths
    You will see the Defender settings exclusions there (the ones you see by going to Defender settings, exclusions).

    If they look like/are malware, you can delete the entries, all except '(default)'. Be careful, double check !!
    {Tip: you can use the standard ctrl-click to select one, & shift-click to select a range) Be careful, double check !! }

    The latter (2) are more puzzling, since the Defender settings will not let you remove them.
    You will see a message in RED: Some settings are managed by your organization

    Musfiquer Rhman at https://answers.microsoft.com/en-us/...f-d6b1b7e1c256 solved this by

    In Regedit > HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Microsoft > Windows Defender > Exclusions > Paths
    I have deleted all files except (default) and it solved my problem.
    That's this key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Paths
    A little deeper, I see that some policy keys use "policy objects" (long dll codes in curly brackets), and it may be advisable to drill down into these to make sure they are legitimate. I haven't done so yet.
    These keys, the list may not be complete:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{object}\Software\Policies\Microsoft\Windows Defender\Exclusions
    HKEY_USERS\<S-1-5- etc. user code>\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{object}\Software\Policies\Microsoft\Windows Defender\Exclusions
    HKEY_USERS\<S-1-5- etc. user code>\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{object}Machine\Software\Policies\Microsoft\Windows Defender\Exclusions
    When you're done, close regedit & reboot, then double-check everything again. And, of course, get Defender updates & run a scan.
      My ComputerSystem Spec

 
Page 5 of 5 FirstFirst ... 345


Similar Threads
Tutorial Category
Security System Turn On or Off Windows Defender Real-time Protection in Windows 10
Windows Defender helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC without your knowledge: it might install itself from an email message, when you...
Tutorials
Customization Create Windows Defender Settings shortcut in Windows 10
How to Create a Windows Defender Settings shortcut in Windows 10 Windows Defender helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC without your...
Tutorials
Solved Windows Defender
windows defender is turned of on my computer but every time I boot my system windows defender is telling me its turned of is there a way to stop this (I am using windows 10 pro insider preview build 10074)
AntiVirus, Firewalls and System Security
Microsoft updates Windows Defender to remove Superfish infection
Read more: Microsoft updates Windows Defender to remove Superfish infection | ZDNet
Windows 10 News
Solved Windows defender off ?
Uninstalled Panda and now windows defender is stuck off, Not clearly listed in windows features any one know which feature defender is listed as in turn windows features on or off :/ Thanks in advance, Cheers. Defender is still listed in...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:11.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums