Main Forum > Tweaking.com Support & Help

Trojan:Win32/Critet.BS - False positive from Defender?

(1/17) > >>

Alchemist:
I have just had Windows Repair Pro quarantined and removed by Windows Defender as a severe risk of infection by Trojan:Win32/Critet.BS
I have repeatedly downloaded and tried to reinstall but the effect is the same.
I presume that this is a false positive but can you confirm ?
Better to be safe than sorry.
Any plans to look into this issue, if it is a real one, and liaise with Microsoft to prevent a recurrence and issue an update ?
I really rely on Windows Repair.

Boggin:
A little while ago my Norton Security kicked out the .exe of Windows Repair, even though it was already installed and I had to have it whitelisted before I could install it again.

That was done by adding www.tweaking.com to the whitelist, but while this can be done in Windows Defender, it requires a file or folder.

https://support.microsoft.com/en-us/help/4028485/windows-10-add-an-exclusion-to-windows-defender-antivirus

So you may need to boot up into Safe Mode with Networking to download the program then see if you can open Windows Defender in that mode to add it as an exclusion.

I've just downloaded 4.0.15 and Norton said it was safe, so it is definitely a false positive.

fabrikator:
I have some information that may shine some light on this issue. I run Win7 PRO with Microsoft Security Essentials.

Shane posted v4.0.15 at 8:20 P.M. 3-14-18

I downloaded and installed v4.0.15 early A.M. of 3-15-18 with no virus detection problems at all. The v4.0.15 worked fine.

UNTIL  .....

Microsoft issues MSSE virus update v1.263.672.0 which I downloaded and installed this morning, A.M. 3-17-18 ...

AND THEN everything went to hell with v4.0.15, MSSE showing the Trojan Win32/Critet.BS virus.

I could not run or re-download v4.0.15 after the MSSE v1.263.672.0 update.

HOWEVER, there is NO problems with Windows Repair v4.0.14. I re-install it and am using it now until SHANE can FIX THIS !!!

Thanks,

fabrikator

technet:
Getting the same report here. It really is a false positive?

Boggin:

--- Quote from: technet on March 17, 2018, 03:53:57 pm ---Getting the same report here. It really is a false positive?

--- End quote ---

After reading the first report, I downloaded the program, although I already have the Pro version and Norton Security didn't snag anything which I believe it would have had there been something there.

You will need to whitelist it and contact MS to sort out their Definitions for their AV programs.

Navigation

[0] Message Index

[#] Next page