You are here

Home » Forums » Support Forums » Utility Apps Support

CrystalDiskInfo Portable 8.12.5 MSE blocked explorer.exe DefenseEvasion.a!ml

5 posts / 0 new
Log in or register to post comments
Last post
August 12, 2021 - 4:28pm
#1
SGvagon
Offline
Last seen: 2 years 1 month ago
Joined: 2021-08-12 16:12
CrystalDiskInfo Portable 8.12.5 MSE blocked explorer.exe DefenseEvasion.a!ml

Hello,

I tried download CrystalDiskInfo Portable 8.12.5, at the end of installation I checked option, that I want start program after install. But then explorer.exe shut down/crashed and MSE (Microsoft security essentials) show table with No action necessary. I started explorer.exe via Task Manager and in quarantine MSE I had DefenseEvasion.a!ml virus that is contained in explorer.exe .
So I restarted system and MSE blocked explorer.exe again. Only solution for solving this issue was reinstall MSE.

My question is, is that virus was False positive detection by MSE or not?

Thank you in advance.

Top
August 12, 2021 - 4:51pm
John T. Haller
John T. Haller's picture
Online
Last seen: 12 min 16 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
You Can Check

From the CrystalDisk Info Portable homepage, click on AntiVirus Scan just below the Download button. It'll take you to a page with a link to the latest scan in VirusTotal. There, you'll see it has no detections across 68 different antivirus engines, including Microsoft's. I checked in Microsoft Defender in Windows 10, Security Intelligence version 1.3455.416.0 myself as well and both the installer and all contained files come back clean. Make sure you've updated your definitions.

Sometimes, the impossible can become possible, if you're awesome!

Top
August 12, 2021 - 5:08pm
(Reply to #2)
SGvagon
Offline
Last seen: 2 years 1 month ago
Joined: 2021-08-12 16:12
Yes, I have the last

Yes, I have the last definition for MSE (I have Windows 7 not Windows 10) . The problem is maybe, that I have changed Windows Orb (Start button icon) , that editing explorer.exe . But I don't understand, that Crystaldisk Info portable installation make this issue with explorer.exe and DefenseEvasion.a!ml virus.
I downloaded Crystaldisk Info portable lots of times without any issues (with changed Windows Orb too) . This is my first case.

And Crystaldisk Info portable installation still have an issue with checking button for start program after installation. Crystaldisk Info portable not start after installation even if I checked the start program after install. Maybe something happened with this and MSE detecting explorer.exe as a virus?

So everything is safe and the virus was false positive?

Top
August 12, 2021 - 5:59pm
(Reply to #3)
John T. Haller
John T. Haller's picture
Online
Last seen: 12 min 16 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Maybe

Try disabling your custom start menu icon temporarily and see if that fixes it. If so, it could just be an odd conflict (I doubt anyone tests for something like this) and maybe you can whitelist either your change or CrystalDiskInfo for now. But, yes, I can confirm that CrystalDiskInfo is clean. To be sure, download it from our site using your browser and then check it on VirusTotal.com yourself (anyone can upload and check a file). That will let you ensure you've got the real deal.

Sometimes, the impossible can become possible, if you're awesome!

Top
August 12, 2021 - 6:19pm
(Reply to #4)
SGvagon
Offline
Last seen: 2 years 1 month ago
Joined: 2021-08-12 16:12
Ok, thank you for quick reply

Ok, thank you for quick reply. So, I will try load original explorer.exe and download Crystaldisk Info portable from this again when I have some free time to do it. I still hope, that DefenseEvasion.a!ml virus was false positive. I installed this Windows 7 two days ago, so it's almost clean (only drivers, Firefox ESR, MPC-HC, change Windows Start Orb, MSE and now Crystaldiskinfo Portable) .

Top
Log in or register to post comments