FJ181

I understand thank you for your replies anyway.

So I did scans with MalwareBytes and Adwcleaner with F-secure turned off. The scans didn't find anything (Adwcleaner told about preinstalled ASUS programs but I know those are legit since my PC is ASUS after all). Like I said earlier I'm unfortunately not comfortable with trying/installing the Farbar Recovery Scan Tool so I didn't try scanning with that. I did do a scan with HitmanPro tho and it didn't find anything either. I attached the scan logs to this message. Should these scans not finding anything either mean that it is a false positive by Windows Defender? (Also I hope you don't mind that my MalwareBytes log is not in English). Adwcleaner.txt MalwareBytes scan.txt

I'll try doing the scans with Malwarebytes and Adwcleaner but I think I don't want to try "Farbar Recovery Scan Tool" even if it is safe since I haven't heard of it before (also I don't trust pages like these, sorry if this is making helping me more difficult). I'll post another reply after I'm done with the scans (I'm not home at the moment since I needed to go to work).

My PC came with preinstalled Windows 10 and I've got this PC for 2 years. It is ASUS laptop (Republic of gamers). I would check the model but I'm not home yet...so ill update that later. Windows Defender keeps telling me about this PUA. I have been scanning my PC all over again and tried clearing out temporary files and such but still shows the PUA as active,I have F-secure installed and as my main AV but I did a full scan with WD too after getting a blue screen while browsing internet. I know the Recovery folder is not even visible by default...I know I can't access it even when it is visible. Location of the PUA that Windows Defender notifications keeps telling about ---> containerfile: C:\Recovery\Customizations\usmt.ppkg file: C:\Recovery\Customizations\usmt.ppkg->\ICB\MachineSpecific\File\C$\Program Files (x86)\ASUS\GameFirst IV\Driver\tdi\i386\netfilter2.sys file: C:\Recovery\Customizations\usmt.ppkg->\ICB\MachineSpecific\File\C$\Windows\System32\drivers\netfilter2.sys I think it might be ASUS preinstalled program but I can't know for sure since I can't access the Recovery folder (and even if I could I think I still would not know for sure).The other netfilter2.sys was deleted (maybe) since it was no longer in it's folder. Win32 ASUS drivers folder (deleted by Windows Defender after full Scan)? Windows Defender keeps telling me about the PUA. I have tried deleting the detection history but it has no effect.The notification only appears with Windows Defender full scan. No other AV program will detect it (MalwareBytes, HitmanPro, AdwCleaner, F-secure, Windows Defender Offline scan/quick scan, Windows Safety Scanner). I would just like to get rid of it I don't care if the program is actually made/preinstalled by ASUS or not as long as deleting it has no effect on my PC/it's performance. Is netfilter2.sys important? What does it do and do I need it for my PC to work or will it have any impact on my PC's performance? Is the Recovery folder important and will deleting/altering it have severe harmful effects on my PC? Some people said they got blue screen and that their PC wont boot after deleting it. I have been told in Microsoft community, Microsoft Support, F-secure forums and else where that it is most likely a false positive but no one could confirm this for sure. Since F-secure never detected anything it should be false positive and nothing more yet I have not been able to use my PC without feeling paranoid over my accounts/safety. I'm just too paranoid about this. I don't want to do a system reset since getting F-secure back and installing all the 30+ games and other software that I have would be a pain. Can ASUS Backtracker get rid of the Recovery folder that (should?) be ASUS Recovery folder and not the Windows 10 itself since it was preinstalled? Can the netfilter SDK itself somehow be deleted or just delete its Recovery files since Windows Defender can't seem to get rid of it and other AVs don't detect it. Is here anyway to either get rid of it or confirm that it is actually not harmful? I can't check the original file since it got deleted and just the file in the Recovery folder remains. Also what is Win32/DefenderTamperingRestore? Got that notification after scanning the recovery folder with Windows Safety Scanner. No mention about the PUA tho and said that Win32/DefenderTamperingRestore was deleted. I did a Repair Upgrade from USB when trying to get rid of the notification so that might have caused this? If anyone has any suggestions or ideas on what I should do I would really appreciate it. (Sorry for having so many dumb questions and sorry that this is so long but I'm just really freaked out about this).