Rogue Killer shuts down during a scan

[darrylsb]

It looks like Windows Defender is shutting down Rogue Killer during a scan.  Rogue Killer does not show a new scan in history.    When Rogue killer shuts down I get a Windows notifications that shows it has detected the following:  Behavior:Win32/Powessere.D   I have checked the remove threat in Windows Defender and tried again but I get the same result.  Nothing in Windows Event logs.

Windows 10 home 64bit.  logged in as an administrator.  Thank you for your help

[Curson]

Hi darrylsb,

Thanks for supporting our product and welcome to Adlice.com forum.
This is a false positive on Windows Defender side. Would you agree to help us whitelisting it ?

Regards.

[darrylsb]

Yes

[Curson]

Hi darrylsb,

Thanks.
First of all, please start RogueKiller but do not launch a scan.

Download PsList (x64) on your desktop.
Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :

Code: [Select]

"%USERPROFILE%\Desktop\pslist64.exe" -t -accepteula >> "%USERPROFILE%\Desktop\PsList.log"A new file named PsList.log should has been created on your desktop. Please attach it whith your next reply.

Please start a new analysis with RogueKiller and wait until Windows Defender terminates it.
Then, please open Windows Defender control panel, go to "History" tab and click on detected thread at the top of the list, like this :

Please do a screenshot and attach it with your next reply.

Regards.

[darrylsb]

I could not get the screen shot to paste so I created an .rtf and zipped it.

[Curson]

Hi darrylsb,

Is there anything after the "Affected Items" section ?

Regards.

[darrylsb]

The initial Windows Defender screen  says no threats found but if you look at history it shows 2 or this time three instances of Win32/Powessere.D

[Curson]

Hi darrylsb,

Thanks for your feedback.
Would you agree to do a live session with us in order to retrieve more information about the issue ?

Regards.

[darrylsb]

Yes I was out of town.  Tomorrow?

[Curson]

Hi darrylsb,

Thanks for your support.
Could you please open a new support ticket using the Contact Form ? This way, it will be easier to setup the details of the live session.

Regards.