Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 968288" data-attributes="member: 78686">Microsoft Defender for more than 2 weeks is not quarantining/deleting malware often. It detects it, says that it&#039;s quarantined but when I go to folder the file is there, and it again gets detected by Defender and the same process keeps happening. It doesn&#039;t happen all the time but like 2/5 times for me for malware and 4/5 times for PUP detections. This happens for real time protection only. If I do a right-click scan of the folder containing the malware/PUP and select to quarantine/remove it from there, then it gets removed normally. I even saw couple of reports like this on Reddit.I faced this issue more than a year ago when I tried the insider builds of Windows 10. Windows Defender Sandbox feature was &quot;on&quot; in Windows 10 insider builds. I thought it&#039;s a bug of the sandbox feature, and I was right because the issue was gone after disabling it. Now Microsoft Defender on Windows 11 comes with the sandbox feature on by default and looks like the bug has returned. At least partially returned. Because like my previous experience, after turning off the Defender sandbox things are normal again. Microsoft is probably the toughest AV to report a bug to as a consumer. Even in the Forrester Wave™: Endpoint Security report, Microsoft Defender Endpoint was kind of the best product in everything except customer support. They rank it the worst in customer support, if I remember correctly. So, how do I report something like this to them that probably is not happening on all the PCs. In my case, it happens on stable builds, insider builds, freshly installed stable builds, everywhere. Also, [USER=32260]@Andy Ful[/USER] the Advanced Run method that you shared for removing Defender&#039;s protection history gets detected by MD&#039;s Tamper Protection, but the protection history gets removed anyway. Is this a bug too? Is this a bug of the tamper protection? Why it doesn&#039;t stop it even after the detection?</blockquote>

[QUOTE="SeriousHoax, post: 968288, member: 78686"] Microsoft Defender for more than 2 weeks is not quarantining/deleting malware often. It detects it, says that it's quarantined but when I go to folder the file is there, and it again gets detected by Defender and the same process keeps happening. It doesn't happen all the time but like 2/5 times for me for malware and 4/5 times for PUP detections. This happens for real time protection only. If I do a right-click scan of the folder containing the malware/PUP and select to quarantine/remove it from there, then it gets removed normally. I even saw couple of reports like this on Reddit. I faced this issue more than a year ago when I tried the insider builds of Windows 10. Windows Defender Sandbox feature was "on" in Windows 10 insider builds. I thought it's a bug of the sandbox feature, and I was right because the issue was gone after disabling it. Now Microsoft Defender on Windows 11 comes with the sandbox feature on by default and looks like the bug has returned. At least partially returned. Because like my previous experience, after turning off the Defender sandbox things are normal again. Microsoft is probably the toughest AV to report a bug to as a consumer. Even in the Forrester Wave™: Endpoint Security report, Microsoft Defender Endpoint was kind of the best product in everything except customer support. They rank it the worst in customer support, if I remember correctly. So, how do I report something like this to them that probably is not happening on all the PCs. In my case, it happens on stable builds, insider builds, freshly installed stable builds, everywhere. Also, [USER=32260]@Andy Ful[/USER] the Advanced Run method that you shared for removing Defender's protection history gets detected by MD's Tamper Protection, but the protection history gets removed anyway. Is this a bug too? Is this a bug of the tamper protection? Why it doesn't stop it even after the detection? [/QUOTE]

Verification