18 ms·
Windows Defender blocks qBittorrent
- MikeUt 5y agoIt's the official Microsoft stance that torrent software is considered PUA (potentially unwanted application) on Enterprise. Perhaps they're expanding that to consumer versions? They define PUA very vaguely, with rather disturbing language. Phrases like "safeguard productivity" and "help deliver delightful Windows experiences" are not what I would expect in security software documentation: Our PUA protection aims to safeguard user productivity and ensure enjoyable Windows experiences. This protection helps deliver more productive, performant, and delightful Windows experiences. Microsoft uses specific categories and the category definitions to classify software as a PUA. Torrent software (Enterprise only) https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/criteria https://docs.microsoft.com/en-us/windows/security/threat-pro...
- AbrahamParangi 5y agoIt does seem that torrent software is very likely unwanted by the customer on enterprise, where the customer is the business.
- deepstack 5y agoHmm, many Linux distro are distributed via Torrent. As well as many video platform also use webtorrent. It is a just protocol like http. And when one is downloading a really large file, torrent can arguably be much better than direct download.
- gruez 5y agoThat might be true, but let's be real here: torrents are overwhelmingly used to pirate software/videos/music. The categorization is "potentially unwanted", not " definitely unwanted", so I think the classification is justified. Also, despite "linux iso torrents" being a meme in many circles I have rarely actually used that to download isos. The default option of http is almost always fast enough and the increased hassle of booting up my torrent client isn't worth it.
- hsbauauvhabzb 5y agoSure, I use BitTorrent for Linux isos at work in a highly controlled environment, but for every one of me there would be hundreds pirating software at work, and tens accidentally killing their businesses bandwidth/quota by seeding too much.
- saiya-jin 5y agoEnterprise also expects certain kind of user awareness, or if not then certain amount of admin-set restrictions on the machine. Not these kind of big daddy policing decisions.
- hsbauauvhabzb 5y agoIs defender a ‘big daddy policing decision’? You’re welcome to disable it via group policy if you like.
- josephcsible 5y agoDefender working this way by default is a ‘big daddy policing decision’. The default should be to not do this, and people that want it should have to enable it via Group Policy.
- hsbauauvhabzb 5y agoAre you saying that insecure by default is a good idea? Defender enabled by default would save billions annually, and not just from businesses but also grandma who’s entire photo collection just got ransomware’d. That big daddy policing move was the single best action taken by Microsoft.
- josephcsible 5y agoI'm not saying that Defender should be disabled by default. I'm saying that it shouldn't flag BitTorrent clients by default.
- 5y ago
- AbrahamParangi 5y agoYes but in practice people often use BitTorrent on their work computer to download music, movies and malware.
- duiker101 5y agoHence the P for potentially.
- hsbauauvhabzb 5y agoPUA definitions are probably different enough to warrant segregation. Games on an enterprise system are probably equally PUA
- spijdar 5y agoInterestingly, that document states that "PUAs are not considered malware." PUA detection and removal also seems to be a separate toggle from general malware protection, so running Set-MpPreference -PUAProtection Disabled From an admin powershell session should prevent this behavior. It sounds like a bug/unintentional if it's being flagged on non-enterprise SKUs of Windows, though.
- underscore_ku 5y agoF Microsoft! use linux
- ogurechny 5y agoI suppose that in enterprise environment Defender acts as a simple agent reporting to a control center that can be set with a lot more granular rules on whether something is wanted on a specific workplace.
- jaywalk 5y agoI'm gonna go out on a limb and say that most of the people with these issues are using pirated Enterprise versions of Windows, not trying to install a BitTorrent client on their work computers. It's definitely not impacting Home or Pro versions.
- marcodiego 5y agoI wonder if the MAFIAA can pressure software vendors to ban classes of software. I think agreements like: "We'll only make it legal to run our streaming service on your OS if you can prevent these specific set of software from running". I think this already happens with TV's but anyone knows if there is already pressure in this direction in the software world?
- ugjka 5y agoIf I can't stream i pirate and I do it on linux. No Loki in my region? Didn't stop me
- dtx1 5y agoI basically do the same thing. Why bother figuring out how to run Netflix with DRM on Linux and pay for the pleaser of a subpar libary when my little Raspberry Pi Seedbox, a 5$/Month VPN and Membership in a private Tracker gets me everything I want without the hassle or annoying DRM to deal with. But we are not the ones that will be hit by this. It's the normies and computer illiterates that will have to deal with the issue. And god save us from the politicians that will make OSes that can pirate content just plain illegal.
- criddell 5y ago> Why bother figuring out how to run Netflix with DRM on Linux Because you want to pay for things. You want to support people making the things you enjoy. You want Netflix and other streaming companies to see that Linux users matter.
- neonihil 5y agoWhat if you pay for Netflix — because you want to support creators, — but you actually download stuff — because you also want to be able to watch it without hustle? Like Netflix 4K is not working on Linux. It’s just not. And it wasn’t working on Macs either until very recently, but it needs some special hardware.
- x86_64Ubuntu 5y agoThis is how you end up with people degrading their system's security overall, which is what you really don't want.
- Subsentient 5y agoWell you'd really have to be crazy to try and torrent stuff on a Windows machine nowadays anyways. That's just getting on your knees and begging for malware. Maybe this will help some of the more savvy users realize that Windows should be relegated to a virtual machine for when you need a specific Windows app that doesn't run under Wine, and never given access to real hardware. I only use my Win10 VM for compiling stuff with MSVC that refuses to build with MinGW.
- smcl 5y agoYou mean the act of torrenting on its own would cause you to fall victim to malware, or that the process of finding a torrent via certain sites would do so?
- Subsentient 5y agoBoth. Plenty of malware-infested executables in torrents.
- mtone 5y agoInstead, just don't run executables from untrusted sources. Torrents, email, mobile apps (like that fake banking iOS app that looks like the legit one) or otherwise. The transport method doesn't matter much.
- smcl 5y agoSo of course double-clicking Band.of.Brothers.mkv.exe will cause you to have a bad time. But I'm curious why just having a torrent client downloading something would cause anyone to get compromised. I haven't heard of this.
- prepend 5y agoNot sure what you mean as I’ve used reputable tracker sites without any malware for many years. As for downloading random torrents off I trusted sites, that seems about as smart as random exes.
- 5y ago
- tyingq 5y agoDefender also doesn't like NirSoft's ProduKey. Which is irritating, as all it's doing is retrieving product keys. If you want to reinstall Windows, it's a pretty normal thing to want to do.
- arsome 5y agoMany NirSoft utilities get detected. Not sure if it's still true, but back in the day it was surprisingly common to find them embedded in password stealing malware, it'd basically run a few different password dumpers, make a zip and send it off to an FTP site. Minimal software development knowledge necessary as the whole operation could be done from a batch script. Particularly bad malware too since anyone who reverse engineered it could get the FTP site password and download/delete all their stolen passwords.
- ogurechny 5y agoThen wmic.exe should also be listed as PUA, as you can get the product key with it. Not even mentioning Powershell and CMD — average user never runs them, while bad people do that all the time. Their appearance in the process list is a sure sign that the system WUZ HAKKED.
- arsome 5y agoYeah, I'm pretty sure I've had to ignore every PUA detection in the book. They're completely useless, especially if you pirate Microsoft stuff or use "hacking tools" like netcat. I'm not defending the behaviour, it's incredibly stupid, but it might have caught some legitimate malware in some cases where Defender itself was unable to detect the actual malicious portion.
- moss2 5y agoSwitching my home computer to Linux has had its problems since I'm an avid gamer, but the more news I read about Windows the less I regret that decision.
- sslayer 5y agoI ditched in the middle of Windows 7, with absolutely no regrets. Valve has made tremendous inroads in gaming with Proton, along with developers releasing for Linux, there really isn't a good excuse to stay with Microsoft.
- AnIdiotOnTheNet 5y agoSure their is: Windows is a better fit for the things I do with a computer. Edit: I know right? How dare I express a preference for Windows. Downvote me to hell because I don't like using your favored OS.
- robador 5y agoIs Windows the better fit or is it the software that runs on it that doesn't have linux support?
- AnIdiotOnTheNet 5y agoIt's the OS. The application distribution model is, in my opinion, significantly better than Linux and it's package management/repo scheme. I don't have to recompile old software to keep using it 2 years later (or 10 for that matter), I can place applications on different disks than the OS resides on, I can keep multiple versions of the same application, etc.
- hulitu 5y agoNo and no. Windows is "the better fit" because: 1) AD. 2) corruption (it's a very long story, see Munich for one). 3) anticompetitive behavior. 4) Excel.
- 5y ago
- AnIdiotOnTheNet 5y agoJust another way in which the cure (anti-malware software) is worse than the disease (the malware). Slows down every file access and program launch, high false positive rate, is itself a vector for exploitation... why did we ever think this was a good idea?
- timbit42 5y agoIt seemed like a good idea because back then the OS wasn't multi-tasking.
- JadeNB 5y ago> It seemed like a good idea because back then the OS wasn't multi-tasking. Of course virus scanners have been around in some form forever, but I believe always-on virus scanners didn't really take off until the multi-tasking age (and indeed couldn't—"always on" doesn't mean much without some sort of multi-tasking). For example, https://en.wikipedia.org/wiki/Antivirus_software#2000%E2%80%932005_period https://en.wikipedia.org/wiki/Antivirus_software#2000%E2%80%... tells me that ClamAV wasn't released until 2001. Optional, "on-call" virus scanners are highly unobtrusive (though, like manual backup, only as reliable as their operators), and I can't imagine this sort of outcry against them.
- allo37 5y agoI'm convinced most of this anti-malware software is largely security theatre, but it helps IT departments sleep better at night I guess.
- kragen 5y agoI imagine that what happened was that, if the same muggles came back to you every week to uninstall the same malware from their computers, you'd get pretty tired of it after a few months and install some kind of malware blocker. It's not a solution to the problem, but it's a painkiller.
- alerighi 5y agoAnti malware software is worse than malware in itself. By the way the reason we have malware in Windows is for how Windows works: unlike Linux distributions Windows doesn't have a package manager (yes, now there is the Windows store, but practically no one uses it, even Microsoft itself since you don't find Office on it!), and thus users need to download executables from the internet. But users are stupid and will probably download the first link they find on Google that probably contain malware. In Linux that is not possible, not because Linux is more secure (it's not), but for the simple fact that downloading executables from the internet is not something you commonly do, you install software from trusted sources. To run a file you downloaded you even need to add a permission that is not enabled by default. That is enough to avoid people executing by mistake with a double click a file they received by email named invoice.pdf.exe (where of course Windows hides the .exe extension by default...). Microsoft is addressing a problem the wrong way around, instead of establishing a trusted source of software, they are still developing antivirus software that not only slows down the computer, but they don't even work so well with modern malwares, that are so sophisticated to bypass easily an antivirus protection.
- kozak 5y agoI recently unpacked an old archive from the time I was making some shareware few decades ago. Windows Defender instantly ate all keygen.exe files from it. Those keygens were my own keygens for my own software (I wrote them myself and used them to generate keys for my customers back in the day).
- sdoering 5y agoWow. Any idea why?
- efdee 5y agoMany virusscanners do this, arguably because as an employer you would want to block your employees from running them.
- arthurcolle 5y agoLmao - WHAT? On his own computer, not with any (based on the post) added certs? Madness
- gruez 5y ago>Oh his own computer Company machine is implied.
- arthurcolle 5y agoYou're right, I re-read and that's clear now.
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]
- ethbr0 5y agoI'd also be curious what happens if you rename them to {not-keygen}.exe I'd hope it wouldn't make a difference, but my experience with IT security thinking makes me bet the other way.
- Semaphor 5y agoI wonder if this is a weird bug? A/B Test? Locale-specific settings? The thread has several people without the issue and I just checked, Defender is not blocking my qBittorrent.
- DrBazza 5y agoAnd from just the other day: Windows Defender blocks decss. https://news.ycombinator.com/item?id=27914752 https://news.ycombinator.com/item?id=27914752 It's almost like there's something fishy going on.
- cle 5y agoThe complaints in GitHub started rolling in on March 4. I found a few torrent clients that were added by Microsoft as PUA on March 2 (this is probably an incomplete list): - QBitTorrent: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/QBitTorrent&threatId=292801 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo... - Tribler: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/Tribler&threatId=292812 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo... - Deluge: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/Deluge&threatId=292802 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo... - FrostWire: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/FrostWire&threatId=292806 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo... - BitComet: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/BitComet&threatId=292807 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo... - Tixati: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/Tixati&threatId=292810 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo... - BitTorrent: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/BitTorrent&threatId=292805 https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo...
- alyandon 5y agoThere are group policy settings to regain control over Windows Defender automatic quarantine/deletion: https://www.windows-security.org/6d29bb05ca76bf06eae9760e736b6860/turn-off-routine-remediation https://www.windows-security.org/6d29bb05ca76bf06eae9760e736... I use that and another setting to disable automatic sample submitting after catching Defender uploading sensitive files from my Firefox profile directory like places.sqlite.
- bserge 5y agoI don't know how the new Defender quarantine works, but it's not just a folder on the system anymore. Often you just can't get your files back and Microsoft's answer is "well, they're dangerous".
- MomoXenosaga 5y agoWin10 home doesn't have that. And I speak from experience that defender likes to magic away files to quarantine without any user interaction. Yes I didn't believe it either but it does. Indignation!
- alyandon 5y agoWhile Windows 10 Home doesn't have a UI for manipulating the local group policy settings you might have luck just setting the registry key directly.
- cpach 5y agoAny qBittorrent users on Windows who can verify that the issue described actually still persists?
- ethbr0 5y agoSubmitter here. Can confirm. Defender uninstalled it on a random Windows box of mine today (7/26/2021). Windows 10 Pro. Version 2004 Build 19041.1110. Windows Defender updated today (7/26/2021). Hence the curiousity and submission.
- cpach 5y agoAh. That’s very frustrating. I’m not on Windows myself but I wonder if there is any workaround. E.g. does it help to add the qBittorrent application folder as an exclusion to Windows Security? https://support.microsoft.com/en-us/windows/add-an-exclusion-to-windows-security-811816c0-4dfd-af4a-47e4-c301afe13b26 https://support.microsoft.com/en-us/windows/add-an-exclusion...
- ethbr0 5y agoI expect so. I didn't poke around it, past the initial message & a whitelisting / allow option. The breach of user trust, to me at least, seems to be Microsoft deciding a user installed application should not be installed, and leveraging Windows to uninstall it for the user. As noted somewhere else, there seems a big gulf between quarantining + alerting & uninstalling + deleting.
- tgsovlerkhgsel 5y ago> Windows 10 Pro This is particularly concerning given the claims that this is only supposed to affect Enterprise versions.
- Nortech001 5y agoWhen I read an article on this topic, the first thought was profound and difficult, and I wondered if others could understand. My site https://www.spectrulogin.email/spectrum-rr-email-settings/ https://www.spectrulogin.email/spectrum-rr-email-settings/ has a discussion board for articles and photos similar to this topic. Could you please visit me when you have time to discuss this topic? https://www.spectrum-login.email/spectrum-rr-email-settings/ https://www.spectrum-login.email/spectrum-rr-email-settings/
- antattack 5y agoNim binaries are also detected as virus. https://github.com/nim-lang/Nim/issues/17820 https://github.com/nim-lang/Nim/issues/17820
- e3bc54b2 5y agoWhen I mentioned in another thread this happening to other open source projects (winmerge, kdiff3) [0], I was told I was making stuff up and/or this is in 'best interest' of users and that this only happens because these are 'uncommon applications'. Its going to be amusing to read replies to this thread. Pardon the snark, but this is BS and its really sad to see this shitshow being defended. [0] https://news.ycombinator.com/item?id=27355191 https://news.ycombinator.com/item?id=27355191 edit: typo
- gruez 5y ago>I was told I was making stuff up and/or this is in 'best interest' I read the comment thread. It's unclear which comment said that you were "making stuff up". There's also zero matches for "best interest" (your direct quote). >that this only happens because these are 'uncommon applications'. Relatively speaking, winmerge and kdiff3 are quite uncommon, compared to the normal stuff that people have installed on their computers. >Pardon the snark, but this is BS and its really sad to see this shitshow being defended. Are you against people defending microsoft on principle, or are simply unsatisfied with the explanations given? The explanation given (ie. unknown software -> don't know whether it's safe -> warn users it's unknown) seems pretty reasonable to me, as it fails closed rather than fail open. For a technical user that might not be an acceptable trade-off, but I also don't see it as an unacceptable default for non-technical users.
- josephcsible 5y ago> Relatively speaking, winmerge and kdiff3 are quite uncommon, compared to the normal stuff that people have installed on their computers. I think you missed the point here. The fact that programs are uncommon isn't a legitimate excuse for Microsoft to falsely flag them as malware and then not fix it.
- gruez 5y agoI'm must be missing some context here. Did OP and/or the project flag this problem to microsoft?
- 5y ago
- laurent123456 5y agoWouldn't signing the application help? I understand many open source projects don't sign their app, because it's not free to do so, but on the other hand it's a bit of a waste. They spend years developing something great, and the first thing users see when they install the app is a big yellow warning as if it was malware (and in this case it's literally detected as such).
- jtbayly 5y agoIirc it also is an unsigned app on the Mac, meaning that by default Macs can’t run the app either.
- adamparsons 5y agoRight click -> open
- jtbayly 5y agoI know how to get around it, but many people don't. And it's similar enough in the warning that it gives that it seemed worth mentioning.
- JadeNB 5y agoThe parent did say "by default". One thing that bites those of us on company machines is that right-click > open requires admin privileges.
- SV_BubbleTime 5y agoCan’t run seems reasonable all things considered for most people. But it isn’t actively removed on the Mac right?
- mikub 5y agoThey also blocked Kevin Beaumonts GitHub repos in Smartscreen because of some vulnerability writeup about HiveNightmare. https://twitter.com/GossiTheDog/status/1419569833298038784 https://twitter.com/GossiTheDog/status/1419569833298038784
- bob1029 5y agoI like how defender has been a daily thing on HN for the last week. If you want to turn this shit completely off (or actually remove it), you just need to find a way to elevate a prompt as TrustedInstaller. This is the magic spell required to carry out extremely dangerous actions, such as 'net stop windefend', or otherwise adjusting permissions so the local administrator is allowed to do administrative things again. I hesitate to share the actual mechanisms for elevating TI at this point. God forbid Microsoft plugs all those little holes and I have literally no choice but to move everything to Linux. I don't mind hacking around the consumer safeguards to get rid of cortana/defender/telemetry/etc because everything else about win10 is amazing. Ideally, I wouldn't have to jump through these hoops and could just pay for a properly-licensed copy of Windows that I actually own.
- novok 5y agoI don't think those controls will ever go away, because Windows is mostly just gamers and corporate IT installations, and IT people will need full control over that kind of stuff until the end of time, due to law.
- bob1029 5y ago> IT people will need full control over that kind of stuff until the end of time, due to law. This is the other edge of the sword when dealing with leviathans like Microsoft. They cannot directly target & oppress independently-minded assholes like myself without also compromising their target markets. If some arbitrary megacorps need a way around this, it would be economically infeasible for Microsoft to develop special custom code piles for every one of them in addition to the builds that the general public use, and also ensure the corporate builds don't magically leak out somehow at that scale.
- a1369209993 5y ago> If you want to turn this shit completely off Or just boot linux and dd a couple KB of zeroes into /media/c/Stupid Crap/windefend.exe et al.
- kilodeca 5y agoDude, just use Linux.
- kilodeca 5y agoLooks like HN prefers to suffer. Yesterday I watched a video that talks about this kind of human behavior. You are welcome to "hell". (This might be inappropriate to say. To the atheists out there.)
- neonihil 5y agoOne more reason why I only use windows what it was built for: to run games. ^.^ No flames. But I mean this is really really rude, even from MS. Forced upgrades were very hard to kill, but eventually some dns and firewall tweaks in the router did the trick. But this? Removing stuff they don’t like? Without user consent? Wow. This is a new level.
- semitones 5y agoI too, am now using Windows primarily to play games or record+edit music, because virtually everything else is easier and faster on Linux for me now.
- Jzush 5y agoHmm, I wonder if this is why I've been unable to use qbittorrent in the last month or so. I connect via a socks5 proxy, and everything appears to be connecting but I get nothing but "checking" continually and no activity.
- PaulDavisThe1st 5y agohttps://www.theregister.com/2020/06/05/windows_10_microsoft_defender_smartscreen/ https://www.theregister.com/2020/06/05/windows_10_microsoft_... Windows Defender routinely blocks the installation of Ardour, too.
- Jenk 5y agoPUA is "potentially unwanted app" right? The "potentially" implies this is somewhat conditional, or optional. Is there no way to tell defender to leave it alone? Without disabling defender entirely I mean.
- theon144 5y agoThere absolutely is, per the last comment in the thread: https://github.com/qbittorrent/qBittorrent/issues/14489#issuecomment-886708453 https://github.com/qbittorrent/qBittorrent/issues/14489#issu... However, that also means disabling protection against cryptominers and a host of other nasty stuff, so it's not really a great solution IMHO.
- Jenk 5y agoYeah I wondered if that app can be whitelisted specifically (and not just by path but by threat name "PUA:Win32/qBittorent")
- rossmohax 5y agoPUA == Potentially Unwanted Application. This is a class of application enterprises might not want to see on their computers. I bet there is a hidden registry key or something to allow PUA. If it was blocked on Home and Pro versions of Windows, then it is indeed odd.
- jmrm 5y agoThis is why the first thing I do in my computers is disabling Defender via Registry or Group Policy. It not only enables itself after rebooting the computer, it also ignore your exclusions every month or so when it has an update and removes files you don't want to. Yeah, I know this is unsafe, but if you don't go to weird webpages, only install trusted software from trusted sites, doesn't use other people's pen drives, have weekly usable backups, and check every month the PC with other antivirus and antimalware there isn't so much dangers IMO.
- WhyNotHugo 5y agoGiven that Linuxes are usually distributed via torrents, isn't it curious how suddenly a "bug" in Windows blocks so many torrent applications all of a sudden?
- jodrellblank 5y agoYes, Microsoft which has been hating on Linux for almost 20 years since Ballmer days (despite moving .NET to Linux and releasing VS Code and building their own Linux distribution and becoming one of the biggest Linux server hosts in the world in Azure and building WSL and hosting Linux distributions for use on it) has just this week moved against the torrent protocol from 2001 which is famous for spreading Hollywood films. What's curious is that Linux is used by reasonable people for sensible reasons, but mostly represented online by total conspiracy theorists. At least make your conspiracy believable that the MPAA lent on Bill Gates who used his contacts inside Microsoft to get a rule added to Windows Defender?
- rubyist5eva 5y agoI'm so glad I vaporized my Windows partition a few weeks ago - for completely unrelated reasons but the more time goes on the more I'm sure I made the right choice to swear them off forever. Linux is the only real option if you care about using your computer the way you want instead of how some global corporation decides you should. If you're in the market for a new computer, shop with someone that also cares - System 76 seems like a good start. Dell XPS or Thinkpad with Linux preinstalled would also be a solid choice.
- staticman2 5y agoqBitorrent is working fine on my windows home machine. I also as a test just updated to the newest version and it works fine. This seems like a isolated issue only happening on certain Windows machines.
- deleted 5y ago[deleted]
- gentleman11 5y agoIt’s targeting certain copyrighted works too, even legitimate ones https://www.reddit.com/r/sysadmin/comments/oof29b/windows_defender_july_update_will_delete/ https://www.reddit.com/r/sysadmin/comments/oof29b/windows_de...
- nmfisher 5y agoFor what it’s worth, Defender has been going crazy with false positives since the last Windows update. It’s regularly flagging Android split APKs that I build as trojans, with different signatures each time.
- aceazzameen 5y agoThere's a group policy to prevent this in Win 10 Pro. Although, I haven't tested it with this issue. Open Group Policy Editor, then: Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Turn off routine remediation Enable "Turn off remediation" Policy description: "This policy setting allows you to configure whether Microsoft Defender Antivirus automatically takes action on all detected threats. The action to be taken on a particular threat is determined by the combination of the policy-defined action, user-defined action, and the signature-defined action. If you enable this policy setting, Microsoft Defender Antivirus does not automatically take action on the detected threats, but prompts users to choose from the actions available for each threat. If you disable or do not configure this policy setting, Microsoft Defender Antivirus automatically takes action on all detected threats after a nonconfigurable delay of approximately five seconds."
- Datagenerator 5y agoThe walls of the garden are rising. And retrofitted and applied to your digital archives. Power corrupts.
- wmf 5y agoIs the official binary unsigned by any chance?
- hcta 5y agokind of hilariously ironic. What do you call an app that makes itself impossible to remove, and deletes users' files without their consent? I guess when you spend too long fighting malware, you end up becoming the malware, or something.
- djanogo 5y agoThey would get lot more of community to agree with them had they thrown in a statement that they are doing it as part of "stopping distribution of misleading content". /s
- renonce 5y agoI hate all antivirus software and always try to disable them as soon as I can. They enforce their own values and ideology, and they do terrible at respecting users. Once I had to do disk imaging on a very slow drive. After the imaging was 10% done, it complained that one of the files contained a malware and aborted. I found that it was Windows Defender that was blocking access to one of the files, so I went to Settings and turned off Real-Time Protection, and did disk imaging again. This time the imaging was 80% done before it aborted. The Real-Time Protection turned itself on because it reached time limit. F**k you, Windows Defender. It took me another four hours to find out how to disable it completely because neither registry keys and group policy worked, and its service can't even be turned off. I had to use a third-party tool called dControl to turn it off completely. And interestingly, dControl was flagged by Windows Defender as malware (for the apparent reason that it was designed to disable Windows Defender). Modern approach to protecting computer systems is to design software that is already secure and isolate programs using privileges and sandboxes. NO antivirus, please, they're just bad because they're a blackbox, and all blackboxes are destined to be bad.