StarOne SoftCraft

Committed to Excellence through Innovation

Some Users had reported a Virus/ Trojan alert by Windows Defender in Windows 10. The matter was taken up with Microsoft, who have confirmed that it was incorrect detection. They have now removed the false detection and advised to update the Windows Defender definition.

Let us once again assure you that there is no virus in the software.

AS per the Instructions given by the Microsoft, the User may easily exclude scanning for KPStarOne products as follows:

Define an exclusion on an individual Windows device to prevent an item from being scanned

When you define an exclusion for Microsoft Defender Antivirus, you configure your antivirus to skip that item.

  1. On your Windows 10 device, open the Windows Security app.
  2. Select Virus & threat protection > Virus & threat protection settings.
  3. Under Exclusions, select Add or remove exclusions.
  4. Select + Add an exclusion, and specify its type (File, Folder, File type, or Process).

 

The Microsoft Team has further advised is as follows:

Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:Program FilesWindows Defender

2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”

3. Run "MpCmdRun.exe -SignatureUpdate"

The confirmation about Incorrect detection, received from the Microsoft Analysis team are furnished below. The users having any anti-virus like McAfee etc., then you will not get any such message.

'========== Messages from Microsoft  ================================

Submission details Refresh

mpsupportfiles.cab

Submission ID: cff91af6-ad59-45fe-94ac-0f30a3955585

Status: Completed

Submitted by: amitxxxx@xxx.com

Submitted: Aug 19, 2020 2:17:23 PM

User Opinion: Incorrect detection

Analyst comments:

We have analyzed the logs, as per logs, file path : C:UsersDeepakDownloadsKPSetup67323 (1).exe->(inno#000000) SHA1:4877be946857f680017017631629cd4ca0995214 is getting detected .We have removed the detection.

Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:Program FilesWindows Defender

2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”

3. Run "MpCmdRun.exe -SignatureUpdate"

 

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions Thank you for contacting Microsoft.

Click here for more information

 

'============ End of 2nd  Message =================================

 

Submission details

kpstarone.exe

Submission ID: 003ef867-e0cd-4bc4-bf03-acc7d41ebfdb

Status: Completed

Submitted by: amitxxxx@xxxx.com

Submitted: Aug 14, 2020 6:22:16 PM

User Opinion: Incorrect detection

Analyst comments:

The file is not malware and we cannot reproduce any detection on the file. If detection is still observed, please follow the steps below to capture support log files from the system reporting detection.

On Windows 10, from elevated command prompt, change to directory "%programfiles%windows defender" and execute mpcmdrun.exe with option GetFiles: cd "%programfiles%windows defender"

mpcmdrun.exe -GetFiles

On Windows 7, from elevated command prompt, change to directory "%programfiles%microsoft security client" and execute mpcmdrun.exe with option GetFiles: cd "%programfiles%microsoft security client"

mpcmdrun.exe -GetFiles

All created log files will be compressed into MPSupportFiles.cab. Please send us the detected file and MPSupportFiles.cab via our web portal https://aka.ms/wdsi (select Submissions/Submit a file). We will continue the investigation once we receive the support log files. Thank you for contacting Microsoft.

Click here for more information

'============ End of 1st Message =================================

 

Please do not UNINSTALL your previous Version and install KPStarOne in the same Directory.