Share via

Windows Defender - Binary Files

Anonymous
2018-09-26T16:00:36+00:00

Windows Defender ("WD") has identified an Excel file with a Trojan:Script/Foretype.A!ml . The file had a lot of ordinary VBA code I wrote for myself. WD removed from the file all the code (vbaProject.bin ?). Where the code or the original file was quarantined ? I need to recover at least the VBA modules.

Thank you in advance for the help.

P.S. - The same file is not considered a threat on other computers running Windows Defender.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2018-09-26T16:20:57+00:00

    Hi.

    Follow these steps. I hope it helps.

    1.- Open Windows Defender

    2.- Go to the Anti-virus and anti-threat protection tab

    3.- Open Exam History

    4.- Enter Quarantine Threats

    5.- Click on one of them and click on Restore

    2 people found this answer helpful.
    0 comments
  2. Anonymous
    2018-09-26T20:10:55+00:00

    Excelent idea !

    Thank you !

    PS - I hope Microsoft will notice this problem and improve MD, providing users with  clearer information and choices. Tks, again.

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2018-09-26T18:49:42+00:00

    You could do the following to discard a Trojan on your computer, go to free "Avira" downloads, install and update and then scan your computer and then restore the files in Windows Defender.

    https://www.avira.com/en/free-antivirus-windows

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    0 comments
  4. Anonymous
    2018-09-26T16:49:37+00:00

    Thank you for your reply. I had done that partially, because you don’t really have a chance to restore. You can “Allow” the Trojan:Script/Foretype.A!ml. It doesn’t say anything about restoring a specific file or allowing a specific file to run. It sounds very risky to allow a Trojan with no specification of what files would be affected by it. What if you could be allowing some other file with a real Trojan ?

    Thank you.

    0 comments