Windows Defender Glitche

Since about December 2017, Windows Defender suddenly began to block MultiMaps setup file downloads. Even those of them which he had no claims before to. He suspects a Trojan Win32/Azden.A!Cl presence.

We are absolutely sure this is an erroneous Windows Defender behavior, so called “false positive”:

All users who faced this issue use Windows Defender as antivirus program. Other antiviruses don’t detect any threat.

  • We checked MultiMaps setup files with the most powerful anti-virus online services: VirusTotal and Kaspersky VirusDesk. Both services did not detect any threats. You can do it as well (see step 6 below) when you have some doubts.
  • Also we checked setup files with Windows Defender’s own online service (https://www.microsoft.com/en-us/wdsi/filesubmission). And it did not find threats as well!
  • After download and install MultiMaps version that Windows Defender considers infected, we checked one by one all the files in the installation directory – with the same Windows Defender. He did not find any threat in either of them. Here is an interesting result – none of the files Windows Defender detects as infected, but.. finds a trojan in the setup file of which this one consists…

Yes, we sent a request to the MicroSoft support to they explained this behavior of Windows Defender relative to the MultiMaps setup file, but from our experience we know that the answer will be received not earlier than in a couple of months, or there will be no response at all.

It is likely that after the next threat definitions updates, Windows Defender will no longer detect a mythical Trojan in MultiMaps setup files.

So, if you want to use MultiMaps add-in, but Windows Defender does not allow you to download and install it, you need:

  1. Open Windows Defender: click on the Settings icon in Windows system tray and go to Defender Security Center or find Windows Defender Security Center in the Windows Start menu.
  2. Click the “Virus & threat protection” icon.
  3. Click the “Virus & threat protection settings” link .
  4. Turn out the “Real-time protection”.
  5. Download MultiMaps setup file.
  6. At this step you can check the setup file as described above – via online services VirusTotal and Kaspersky VirusDesk.
  7. Or you can immediately install MultiMaps and turn on real-time protection disabled on the 4th step.
  8. To prevent Windows Defender from blocking MultiMaps setup file in the future, put this file in Windows Defender Exclusions. To do this: in the same window as the real-time protection, scroll down to “Exclusions” and click the link “Add or remove exclusions”. In the next window click “Add an exclusion”, then “Exlude a file” and then browse to and choose the downloaded MultiMaps setup file.

Good luck!

Leave a Reply

Your email address will not be published. Required fields are marked *