Share via

Discord is being detected as PUA:Win32/Presenoker

Anonymous
2022-01-16T17:10:51+00:00

Everytime i open discord i gets this virus saying something about PUA:Win32/Presenoker. So i removed it with Windows Security, i closed discord. Reopened it and i got it again and i need help trying to remove, because everytime i do it comes back, and this app "discord" i use it as a daily basis. So can someone please help figure this out and stop getting this virus everytime i open this app "Discord".

[Original Title: Presenoker]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2022-01-17T09:06:38+00:00

    Hi Peter_791,

    Presenoker is only a PUA (Potentially Unwanted Application) categorized as a low level threat.

    And you may be dealing with a false positive at this point. If you ran the "Microsoft Safety Scanner",

    and it did not detect this malware, but Defender continues to do so, it probably is a false positive.

    Defender and the Safety Scanner both use the same intelligence definitions. Any "real" threat that

    Defender detects, the Safety Scanner should detect, as well.

    You should try to delete ErrorReport.exe from this location, if you haven't already done so.

    **C:\users*(UserId)*AppData\Local\Discord\App-1.0.903\ErrorReport.exe.

    Then follow the instructions for deleting Detection History, in the link that is referenced here.

    https://answers.microsoft.com/en-us/protect/forum/all/cant-delete-virus-puawin32presenoker/6215b9eb-0c12-46df-9cc5-dcf3938ee04a

    Defender tends to detect items that are in its Detection History folder, as current threats. Of which,

    they are not. The Safety Scanner is not inclined to do that. Therefore, does not present this false positive.

    If you should find, that you are not seeing a false positive, scanning with MalwareBytes in Safe Mode,

    may offer you some relief from Presenoker. Unless your "Discord" program repeatedly infects your PC

    with it.

    Good luck, Glen

    2 people found this answer helpful.
    0 comments

Answer accepted by question author

  1. JX313 7,045 Reputation points
    2022-01-17T04:01:45+00:00

    I did a bit of research (or should I say, I Googled it?😆) and got to know that it was a malware which steals passwords, accounts, bank accounts, etc.

    If you downloaded the file from some Discord server, you should immediately change every sensitive info like passwords.

    Run an MWB scan along with it: https://malwarebytes.com/mwb-download

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2022-01-16T17:54:21+00:00

    Hi Peter_791,

    I'm Paul and I'm here to help you with your concern.

    I recommend that you try to use the Microsoft Safety Scanner to remove this threat. You can download it from the link below.

    https://docs.microsoft.com/en-us/windows/securi...

    I hope this helps. Feel free to ask back any questions and keep me posted.

    0 comments