Windows 10: How can prevent svchost.exe and wscript.exe to be excluded from windows defender?

a few days a go, I downloaded harmful file and windows defender recognized it and deleted it.Then, I scan quickly , offline and fullly by window defender.and 2~3 days later, I found that my window defender configuration is changed. some process and location is excluded from windows defender. there is window defender events , ID is 5007.I maually rollback changed configuration by using gpedit.msc which allow to set policy of window defender anti virous.And config window defender exclustion plolicies because harmful process may be hidden and exclude critical process or location from window defen

:)

 

Excluding a .exe process - No file chooser: What to put in the "Name" field?

When you exclude a file, what exactly does it do? Does it exclude the file just from being scanned? Or also exclude any processes from the files excluded? That is, does excluding an exe file, also exclude that exe as a process?

 

windows defender exe missing

Please do the following and upload the respective logs.

1)

• Download Farbar Recovery Scan Tool (FRST64.exe). [See also: Collect Farbar Recovery Scan Tool logs.]
  
• Rename FRST64.exe to EnglishFRST64.exe.
  
• Run EnglishFRST64.exe and click "Scan".
  
• Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.
  

2)

Download defender_diag.bat. Right-click on the file, click Properties, Unblock, and OK. Run the batch file as administrator.

The Batch file queries Defender-related settings/Policies and outputs the results to a log file. Upload this log to your OneDrive and share the link here.

 

Microsoft Defender flags the VB.net EXE for HackTool:Win32/AutoKMS

The best option is to upload a sample of that exe file to the Defender Team on the link below (click Software Developer), so they can analyse the code in the exe and add it to the safe file list in Defender AV:

https://www.microsoft.com/en-us/wdsi/filesubmis...