Windows 10: Trojan:Win32/Gracing.I - false positive?

So one of my binaries got flagged by Windows Defender as containing Trojan:Win32/Gracing.I on one PC, but not a 2nd. As the file was created on the 2nd PC, my initial thought was something got injected during the transfer or on the file sharing site, but in trying to replicate the finding, it seems I can't get the first PC to flag the file again. Even restoring the quarantined file and rescanning, does not retrigger the finding now.Does restoring the quarantined file implicitly allow-list it so it won't retrigger the finding? Or maybe was this actually a false positive and my security defini

:)

 

False Positive by Windows Defender ? Win32/Critet.BS

@G_963

Found thread in ZHPCleaner forum.

Dectection du trojan :Win32/Critet.BS

https://www.nicolascoolman.com/forum/dectection-trojan-win32-critet-t9711.html

Updated Windows Defender definitions to 1.263.740.0 and downloaded ZHPCleaner from author's site. It passed security scan so hopefully the issue has been resolved with false positives.

Try manually updating through Windows Defender Security Center - Virus and Treat Protection Updates and determine if supercopier is still detected.

~

 

False Positive by Windows Defender ? Win32/Critet.BS

hi,

I have the same problem with supercopier that does not run stopped by the defender with this Trojan also with ZHPcleaner!!!

Nicolas Coollman say that it is as false/positive.

 

Trojan:Win32/Dynamer!ac Malware or false positive?

In case that scans with other 2nd opinion scanners (for example Emsisoft, Malwarebytes, Kaspersky, Eset etc etc, see

this list) don't detect anything in your recovery drive, then this is probably a false positive detection by Windows Defender of
Trojan: Win32/Dynamer!ac in pre-loaded HP games in the HP recovery drive.

There exist many other threads on this same topic. Unfortunately, neither Microsoft nor HP seem to care. Up to now, none of them took any action to remedy this since a long time known issue.

You might want to exclude your recovery drive from being scanned.(How to Add or Remove Exclusions for Windows Defender
in Windows 10)

And/or

You might want to have a look at some threads in HP forum, for example:

Archived - HP Support Community

Archived - HP Support Community

And/or

You might want to have a look at some other threads on same topic here in Microsoft Community:

Redirecting

Redirecting