Windows Defender false positive

[xxJackxx 85]

I reinstalled the current beta of ESS this evening and upon install it warned of a potential conflict with Windows Defender and recommended I uninstall it (Windows 8, not an option). Then after it ran its first scan it detected the executable for Windows Defender as malicious and wanted to delete it. Probably something that should be looked into.

[Peter Randziak 1,130]

Hello Jack,

 

could you please paste here appropriate lines from your computer scan log?

[xxJackxx 85]

C:\Windows\WinSxS\amd64_windows-defender-service_31bf3856ad364e35_6.2.9200.16513_none_1eba7d28e058e749\MsMpEng.exe - probably unknown STEALTH.CRYPT.TSR.DRIVER virus [7] - action selection postponed until scan completion

[Peter Randziak 1,130]

Hello Jack,

 

could you please send me a private message with that file attached in an encrypted archive?

[xxJackxx 85]

File sent. ESS was still trying to delete it. Uploaded to virustotal with a 0/49 rate. Not even detected by NOD32, for whatever reasoon.

[Arakasi 549]

If Windows Defender is compromised, it may be a variant of Sirefef lol.

Good luck.

Im sure Peter will get you some much needed assistance !

[Marcos 5,074]

This is not an executable but a small data file. I think it shouldn't be a problem to delete it completely.

[Peter Randziak 1,130]

Hello,

 

thank you for reporting this.

It was a FP and it will be fixed in next VSD update.

[xxJackxx 85]

Thanks to everyone that looked at it. I did not suspect it was anything that was dangerous.