Windows Defender Identifies The SAME PUP As A Threat Repeatedly

Anonymous
2020-06-16T21:00:07+00:00

Since the implementation of W10 V2004, Windows Defender has now been defaulted to identify

PUPS as a threat.  As a result, many are now made aware of their presence.  And they are "remediated",

on the spot, to prevent them from causing any mischief.

The problem occurs on the subsequent scans with Windows Defender. It identifies the same PUP again,

and again. It has been determined that this is caused by the presence of the PUP in Protection History.

It appears that the default remediation that Windows Defender applies to PUPs is to Block them,

then leave them in Protection History .

EDIT:  It has been found that malware other than PUPS, can require this same procedure.

           Some have discovered, that even Trojans exhibit this same characteristic, when remediated by

          Windows Defender in W10 v2004.

If you have any malware, remediated by Windows Defender, that alerts repeatedly, this procedure applies to

it as well. In order to cleanup the malware completely, find the file in the "container file" in the Protection

History record, and delete the file that is described. If you can't find or access the file, run the Microsoft

Safety Scanner. It uses the same definitions as Windows Defender, and should remediate  the file.

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download 

Then proceed to delete the Protection History info.

END EDIT.

Windows Defender is defaulted to scan its own "Scans/History". Resulting in the discovery of the malware over

and over again.  Even though, other scanners see no evidence of the malware on the PC.       It doesn't exist!

Until Microsoft sees fit to fix this problem,  you can prevent the repeating error indication, by deleting the

items that are described in Windows Defender Protection History. You can delete them by accessing their files,

that are located in C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service.

In the "Service" folder, find and delete "Detection History"

Note:  ProgramData is a hidden file. In order to access it, the "Hidden Items" option in "File Explorer" must be

checked.  Find the "Hidden Items" check box under the "View Tab".

And, the first time that you access "Scans", you must select "continue", to obtain the permission.

Restart and try another scan.    Notifications for the current malware should stop.  

However, this program miscue will probably reoccur, when the next PUP / Malware is encountered.  

Glen

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

188 answers

Sort by: Most helpful
  1. Anonymous
    2020-09-05T02:36:13+00:00

    Hey you beauty Glen, thank you very much. Deleting 'detection history' has got rid of them. Man I've tried to delete those 20 times I reckon, now finally only green ticks in Windows security. Awesome thanks brother.

    If you don't mind I got another question - I plugged a USB memory stick into my laptop this morning and 'piryform bundler' or something like that came up, but Windows Security seemed to deal with it. Do you know what that could have been? Thanks again mate. Cheers

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2020-09-04T15:46:33+00:00

    So this means that I dont have to do anything correct? I am in the fashion business i am not quite understnin g this but it does seem to me that it is ok to stay there?

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2020-09-03T03:53:24+00:00

    Going into the hidden history file and deleting it worked.  Thank you so much.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2020-09-01T18:30:51+00:00

    C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service. klasöründe  "Detection History". kısmını temizledim. Ve tarattım;

    Sonuç:

    Since the implementation of W10 V2004, Windows Defender has now been defaulted to identify

    PUPS as a threat.  As a result, many are now made aware of their presence.  And they are "remediated",

    on the spot, to prevent them from causing any mischief.

    The problem occurs on the subsequent scans with Windows Defender. It identifies the same PUP again,

    and again. It has been determined that this is caused by the presence of the PUP in Protection History.

    It appears that the default remediation that Windows Defender applies to PUPs is to Block them,

    then leave them in Protection History .

    EDIT:  It has been found that malware other than PUPS, can require this same procedure.

               Some have discovered, that even Trojans exhibit this same characteristic, when remediated by

              Windows Defender in W10 v2004.

    If you have any malware, remediated by Windows Defender, that alerts repeatedly, this procedure applies to

    it as well. In order to cleanup the malware completely, find the file in the "container file" in the Protection

    History record, and delete the file that is described. If you can't find or access the file, run the Microsoft

    Safety Scanner. It uses the same definitions as Windows Defender, and should remediate  the file.

    https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download 

    Then proceed to delete the Protection History info.

    END EDIT.

    Windows Defender is defaulted to scan its own "Scans/History". Resulting in the discovery of the malware over

    and over again.  Even though, other scanners see no evidence of the malware on the PC.       It doesn't exist!

    Until Microsoft sees fit to fix this problem,  you can prevent the repeating error indication, by deleting the

    items that are described in Windows Defender Protection History. You can delete them by accessing their files,

    that are located in C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service.

    In the "Service" folder, find and delete "Detection History"

    Note:  ProgramData is a hidden file. In order to access it, the "Hidden Items" option in "File Explorer" must be

    checked.  Find the "Hidden Items" check box under the "View Tab".

    And, the first time that you access "Scans", you must select "continue", to obtain the permission.

    Restart and try another scan.    Notifications for the current malware should stop.  

    However, this program miscue will probably reoccur, when the next PUP / Malware is encountered.  

    Glen 

    Maalesef işe yaramadı. :..((

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2020-08-29T11:05:28+00:00

    hello, glen...thanks for your kind information....It works for me!..... Hope I get more such tips from you about windows.

    Was this answer helpful?

    0 comments No comments