Microsoft windows security is deleting a file from IIS WWW root folder.

Question

Hi Team,

We have a problem with an application. One of the files from the IIS application configuration file is deleting automatically from windows server 2019. When we checked event logs, the warning is shown as below.

Could you please suggest how to fix this issue or do we have any option to exclude this specific file scan in the windows defender.

If possible could you please share the steps to fix it.

Answer 1

Hi @Vishakhan K

I understand that a file is being deleted therefore detected as Malware from server 2019? You said there is a shared image, which I am unable to see?

Below are some steps you can follow to exclude the folder from Microsoft Defender for Endpoint and Microsoft Defender Antivirus

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-exclusions-microsoft-defender-antivirus?view=o365-worldwide