TescoBrandJewels Posted November 30, 2021 ID:1490590 Share Posted November 30, 2021 hi I downloaded a PowerPoint from my teacher and windows defender instantly blocked and claims to have removed the threat however I feel unsafe and have changed my google account password from a secure device which I type this from Details (from Windows Defender): This program is dangerous and executed commands from an attacker currently running a scan with malware bytes, until I get the results can anyone share knowledge? Obviously I have deleted the PowerPoint thanks Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted November 30, 2021 Root Admin ID:1490595 Share Posted November 30, 2021 Kind of difficult to say after the fact and not having the actual file. Please do the following so that we can get started and see what's going on. The Farbar Recovery Scan Tool is a free Windows utility designed to create troubleshooting logs for your computer. These logs help our Support team to identify and resolve issues with your computer. There are two versions of the Farbar Recovery Scan Tool available for download: 32-bit and 64-bit. To find which operating system is installed on your computer, refer to Microsoft's article: 32-bit and 64-bit Windows: Frequently asked questions Download and launch Farbar Recovery Scan Tool Download the Farbar Recovery Scan Tool Do not click on any Ads. Locate the file you downloaded on your computer. Downloaded files are often saved to the Downloads folder. Double-click the downloaded file to run the Farbar Recovery Scan Tool. A Windows protected your PC notification may appear. This notification is from the Windows Defender SmartScreen Filter which prevents unfamiliar apps from running on your PC. Disable smart screen ONLY if it interferes with software we may have to use: What is SmartScreen and how can it help protect me? a. Click More info. b. Click Run anyway. When the User Account Control window appears, click Yes. To accept the Disclaimer of warranty, click Yes. Ensure only the boxes listed below are checked Registry Services Drivers Processes Internet One month Addition.txt Disable any Antivirus software you have installed ONLY if it stops software we may use from working. Please remember to re-enable any Antivirus software when we are finished running scans Click Scan. The scan may take a few minutes to complete. When the scan completes, Farbar Recovery Scan Tool shows two messages: Scan completed. FRST.txt is saved in the same directory FRST is located. Addition.txt is saved in the same directory FRST is located. Click OK to close each message window Please attach both of those logs on your next reply, DO NOT copy/paste the contents of the logs directly Link to post Share on other sites More sharing options...
Porthos Posted December 1, 2021 ID:1490645 Share Posted December 1, 2021 @AdvancedSetup https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-scares-admins-with-emotet-false-positives/ 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 1, 2021 Root Admin ID:1490662 Share Posted December 1, 2021 Hello @TescoBrandJewels It looks like Microsoft should have a fix for this soon. Please check for updates from Microsoft soon Link to post Share on other sites More sharing options...
Maurice Naggar Posted March 23, 2022 ID:1508133 Share Posted March 23, 2022 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts