Windows 10 Defender

jstevens
GoldLounger
Posts: 2617
Joined: 26 Jan 2010, 16:31
Location: Southern California

Windows 10 Defender

Post by jstevens »

I just noticed that Windows Defender started to flag a file as having a virus. Is it possible to determine what in the vbaProject.bin may be causing the system to flag it? The current build is 19042.867 which was updated today.

file: \\USB_Drive\Shared Folders\Documents\myFile.xlsm->xl/vbaProject.bin

Detected: TrojanDownloader:O97M/LolBinAbuse!ibt
Status: Quarantined
Quarantined files are in a restricted area where they can’t harm your device.
They will be removed automatically.


Your thoughts are appreciated.
Regards,
John

User avatar
HansV
Administrator
Posts: 78235
Joined: 16 Jan 2010, 00:14
Status: Microsoft MVP
Location: Wageningen, The Netherlands

Re: Windows 10 Defender

Post by HansV »

My first guess would be that it is a false positive.
Does the workbook contain userforms?
Best wishes,
Hans

JoeP
SilverLounger
Posts: 2048
Joined: 25 Jan 2010, 02:12

Re: Windows 10 Defender

Post by JoeP »

If you want another opinion submit the file to VirusTotal.
Joe

jstevens
GoldLounger
Posts: 2617
Joined: 26 Jan 2010, 16:31
Location: Southern California

Re: Windows 10 Defender

Post by jstevens »

Hans,

The workbook does not contain user forms and I would have to agree with you about the false positive.

I restored a backup from the prior day and have not encountered the false positive.
Regards,
John

GabrielBrown
NewLounger
Posts: 1
Joined: 24 Mar 2021, 13:59

Re: Windows 10 Defender

Post by GabrielBrown »

Previously, Windows Defender prevented me from living, constant pop-ups and constant program locks, I just needed to reinstall Windows 10.
Last edited by GabrielBrown on 24 Mar 2021, 14:10, edited 2 times in total.