Windows Defender incorrectly flagged Winaero Tweaker as HackTool


Level 32
Nov 10, 2017
Windows 10's built-in antivirus software Windows Defender ATP uses algorithms and machine learning models to find and block suspicious files on your system, but there is a trade-off.

Sometimes legitimate programs have false-positive detections by Windows Defender who classify them as malicious.

Users are reporting that the popular third-party Windows tweaking app called 'Winaero Tweaker' has been flagged as 'potentially unwanted software' or 'Hacktool' in Windows Defender.

The app, which allows you to customize Windows, is being removed by Windows Defender who is detecting the executable as "HackTool:Win32/WinTweak" or "!#UACTrigger.A".