Windows Defender Bug - False Positive

Question

So off late our company software was getting a false positive from Windows' virus and threat protection where it gives a prompt "Windows has protected your PC" when you run the .exe.
I have already submitted my .exe here https://www.microsoft.com/en-us/wdsi/filesubmission and the results have confirmed that it was a false positive, you can find the results associated with the following submission ID d94d850d-dd50-4f29-a318-1635aeed925e.
After this I see that this particular .exe which I submitted does not give me the "Windows has protected your PC" problem but the other .exes(which are of the exact same software) still give me the problem.
I think this is a bug in the windows security wherein the whole security intelligence is not updated with the results but rather looks like it is only solved for the submitted .exe.
Suggest me ways through which I can get rid of this problem.
The problem seems to be with the results of the analysis not getting updated with the windows virus and threat protection somehow.

This is of utmost priority for us, we would appreciate if you can provide us with responses ASAP!

Thank you

Answer 1

Hey Zhang

Thanks for your response

Let me explain you our problem a bit more in detail

We are a company and we have a software product of ours. The installer for this software product is the one which is having the issue of false positive. When our customers run the installers It gives a prompt which says "Windows has protected your PC" . Even I have experienced that when I try to run the installer on my local system. As a result of this I did submit our installers to Microsoft and they did confirm that these are false positives, here is the submission ID d94d850d-dd50-4f29-a318-1635aeed925e. The problem now is that only the installers that were submitted to Microsoft have been fixed. The other installers(of the exact same software) still seem to have this problem. We want this problem to be solved for all of our customers. Please suggest me ways through which our installers when run by customers never get the prompt "Windows has protected your PC" which is a false positive.

Provide me with a solution with which our software product will never be falsely detected by windows and our customers shall never see the "Windows has protected your PC" prompt when they run our software.

Let me know if you have any questions

Thank you

Answer 2

Hello AliBpm,

Welcome to the Microsoft Community!

Thank you for posting your request for help. Based on your description, I understand that you have already submitted the false positives for the application you are using on your own computer, and the problem no longer occurs on your computer. However, other computers in your company have not submitted this feedback, so the issue of false positives in Windows Defender still exists in other computers. I would like to offer you the following solution to your problem:

• Please ask the members of your workgroup to follow your process to submit the false positives once in their computers.
• If you are the IT person in your company or you can contact your IT person, you can try to submit the file in Submit files in Microsoft Defender for Endpoint so that the devices under your company's domain will no longer receive the threat alerts caused by the secure exe file after receiving the false positives submission. Please refer to the links below: Submit files in Microsoft Defender for Endpoint.

Hope this helps you. Looking forward to your reply we will also adjust and improve the solution for you based on your reply.

Best Regards,

Zhang Yang - MFST | Microsoft Community Support Specialist