Reply to thread

Message

<blockquote data-quote="LaurentG" data-source="post: 935403" data-attributes="member: 91050">Thanks a lot for very detailed explanation.... but I&#039;m still not convinced.Sorry to be so insistent, but please let me explain once more my fear. Maybe with these latest explanations, you&#039;ll be able to reassure me better.I never imagine that the &quot;Wshshell.run&quot; in itself would be excluded. It&#039;s NOT my purpose.But if I do what you show it in your post above, afterwards, if I click onWindows Security / Virus &amp; Threat protection on &quot;Allowed threats&quot;...[ATTACH=full]255858[/ATTACH][ATTACH=full]255860[/ATTACH]...I can see that the Trojan:VBS/Mountsi.A!ml is now &quot;identified as threat which [you] I allowed to run on [your] my device&quot;.Not in the script where it has been detected last time, but &quot;generally speaking&quot;.The best &quot;proof&quot; is that it is no more detected in NONE of the two scripts that were blocked before.And if, in this screen, I click on &quot;Don&#039;t allow&quot;, then both scripts become again blocked....It&#039;s the reason why I remain convinced that excluding such threat decreases the detection of other malicious scripts.</blockquote>

[QUOTE="LaurentG, post: 935403, member: 91050"] Thanks a lot for very detailed explanation.... but I'm still not convinced. Sorry to be so insistent, but please let me explain once more my fear. Maybe with these latest explanations, you'll be able to reassure me better. I never imagine that the [B]"Wshshell.run"[/B] in itself would be excluded. It's NOT my purpose. [B]But if I do what you show it in your post above[/B], afterwards, if I click on Windows Security / Virus & Threat protection on "Allowed threats"... [B][ATTACH type="full" alt="2021-03-20 08_01_34-Dell-Laurent (Test GetPspPhotos et Defender - Windows en_us) [En fonction]...png"]255858[/ATTACH][ATTACH type="full" alt="2021-03-20 08_02_25-Dell-Laurent (Test GetPspPhotos et Defender - Windows en_us) [En fonction]...png"]255860[/ATTACH][/B] ...I can see that the Trojan:VBS/Mountsi.A!ml is now "[B]identified as threat which [you] I allowed to run on [your] my device[/B]". Not in the script where it has been detected last time, [B]but "generally speaking"[/B]. The best "proof" is that it is no more detected in [B]NONE of the two scripts[/B] that were blocked before. And if, in this screen, I click on "Don't allow", then [B]both scripts[/B] become again blocked.... [B]It's the reason why I remain convinced that excluding such threat decreases the detection of other malicious scripts.[/B] [/QUOTE]

Verification