Questions tagged [windows-defender]

Use with Windows Security which was formally called Windows Defender Security Center

References:
Help protect my device with Windows Security

Related tag:
Windows-Security

180 questions
2
votes
0 answers

Can't open Visual Studio Code from Start Menu

I've recently uninstalled VS 2015 and some other packages which I don't recall. Ever since the uninstallation I've not been able to view the the icon of VS Code, VS Code Insider and Windows Defender. All those software were working properly…
20B2
  • 2,011
  • 17
  • 30
1
vote
0 answers

React JS installation using CRA

I used the command ' npx create-react-app appname' and it installed react but afterwards when I closed VS code and went to file explorer to view the folder it started to crash. I could not even right click on the folder, I started getting the…
1
vote
1 answer

Chaining commands in single PS line results in wonky output

In a modification of this, I'm doing this: function Get-AntiMalwareStatus { [CmdletBinding()] param ( [Parameter(Position=0,Helpmessage = 'Possible Values:…
tpcolson
  • 716
  • 1
  • 11
  • 27
1
vote
0 answers

.NET WinForms App misidentified as Trojan AgentTesla

I am struggling with the Windows Defender. Since a few weeks a ClassLibrary.dll from our company gets flagged as the trojan "Trojan:MSIL/AgentTesla.CED!MTB" by the Windows Defender. Of course our customers are loudly complaining. My first step was…
Thanatos
  • 41
  • 5
1
vote
1 answer

403 error when accessing azure defender 365 using azure ad application

I am trying to access microsoft defender end point using application. I am following the guide here my jwt token response is as follow { "aud": "https://api.securitycenter.microsoft.com", "iss":…
Durga
  • 93
  • 9
1
vote
0 answers

Check EXE to see if it can run

Sometimes it happens that access to some EXE file is blocked by Windows Defender or others antivirus programs. When you try to start it manually, an error appears as in the screenshot. If you run such files programmatically through the ShellExecute…
Tigero
  • 21
  • 2
1
vote
0 answers

Windows Defender flag some JSON output file from Trivy as Backdoor:PHP/Remoteshell.V

I'm working on a project where I parse some YAML configuration files in Java, then forge a command to send to a processbuilder which calls Trivy, performs the required scans and then print out two files, one in JSON and one in HTML. With most of the…
1
vote
1 answer

Microsoft Real time protection crashes calling program with .NET Process.Start

I have a software integration program that will launch other applications. A recent Windows 10 update has resulted in the calling application locking up even though the other applications launch. In my code, it is a simple statement. I will use…
Tom
  • 527
  • 1
  • 8
  • 28
1
vote
2 answers

Windows Firewall Rules For SQL Management Studio

The purpose of this post is to find out why I cannot log into a remote SQL Server instance from a Windows 10 system. My Windows 10 system connects just fine, and has fire wall rules that are too many and to un-restrictive. Therefore, I would like to…
octopusgrabbus
  • 10,555
  • 15
  • 68
  • 131
1
vote
0 answers

Custom exe being detected by Windows Defender

I made a custom Java GUI application to help some of my students perform matrix calculus (name: BCS). To have a custom icon and to minimize problems with their lack of experience with jar files, I created an exe that simply runs a bat file that…
veiocadan
  • 33
  • 4
1
vote
2 answers

Kusto KQL (Defender ATP) - Any way to compare strings by sort order?

I'm trying to generate a list of account names (attempted, failed, and successful) via Kusto/KQL aggregation. Intended results are simple-- a single column of string values, sorted alphabetically in ascending order. As it is cutting me off after 10k…
Ivan
  • 1,427
  • 1
  • 16
  • 26
1
vote
1 answer

C# program (Winform and WPF) be treated as virus when create shortcut in startup folder?

Windows defender usually quarantine my program as a virus, and now I found one of these situations: create shortcut in startup folder. I want the program can autoLaunch when the computer start up, so I create a shortcut in …
1
vote
2 answers

I can't turn off Real Time Protection via Powershell

I want to try reverse shell. I tried to turn off Real Time Protection using Powershell command: Set-MpPreference -DisableRealtimeMonitoring $true But it doesn't work. I am pretty sure I did everything right. I opened it as administrator and ran the…
1
vote
1 answer

KQL How to find rows in table based on list

The below code gives the error: A recognition error occurred let vips = datatable (name: string) ['xxxx', 'yyyy', 'zzzz', 'gggg']; DeviceLogonEvents | where AccountName in~ (vips) | summarize by DeviceName | summarize vippc =…
1
vote
0 answers

Windows defender Win32/Persistence.DQ!ml, what is it?

I'm trying to figure out what this generic description of malware means, googling it didn't turn up much https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Behavior%3aWin32%2fPersistence.DQ!ml&threatid=2147737492 I'm…