REPORT FILE AS FALSE POSITIVE UPDATE

Those who are still affected should search for 'Windows Security', then navigate to Protection from viruses and threats and let Defender update it's signature file. Blog reader Bolko mentioned it here and pointed to this Microsoft Answers forum post where a moderator published this information. Only version 1.373.1537.0 of the signature file made the Behaviour:Win32/Hive.ZY false positives stop. In the report next to each CPE identified (and on CVE entries) there is a suppress. Over the course of Sunday, several signature updates for Microsoft Defender came out, but they did not fix the problem. Suppressing these false positives is fairly easy using the HTML report. Signature file 1.373.1537.0 fixes the problem If you suspect Malwarebytes is making false detection, this is known as a false positive. I had reported about the problem promptly yesterday in the blog post Windows Defender reports (false positive) Behaviour:Win32/Hive.ZY (Sept. Report a false positive to Malwarebytes Support. Some users could no longer work with the system as it was flooded with alerts from Defender.

REPORT FILE AS FALSE POSITIVE INSTALL

Even the Windows settings page was detected as malicious. 3 MALICIOUS FILES and 8 POTENTIALLY SUSPICIOUS FILES Funny, isnt it I proceeded to install the Elementor plugin and then changed the report to: 3. However, all applications in which the Electron framework was used also triggered an erroneous detection of Behaviour:Win32/Hive.ZY. As soon as the Defender signature file had version 1.373.1508.0, the virus scanner would hit and report the malware when a Chromium-based browser (Google Chrome, Edge, etc.) was launched. Microsoft had introduced the detection of the Behaviour:Win32/Hive.ZY signature only on Septemwith the update KB2267602. Therefore, the virus scanner then also raises an alarm as soon as a corresponding signature is found in a file. Microsoft Defender detects Behaviour:Win32/Hive.ZY as a threat with suspicious behavior – corresponding files could get onto users' systems as email attachments and downloads. A false positive, also known as a False Detection, is a legitimate file wrongly detected by antivirus as being infected. The Behaviour:Win32/Hive.ZY false positive For messages in the Inbox or any other email folder except Junk Email, use the following method to report spam and phishing messages: Select the More actions ellipses on the top-right corner of the selected message, select Report message from the dropdown menu, and then select Junk or Phishing.

Report file as false positive