You are here

CrystalDiskInfo Portable 8.12.5 MSE blocked explorer.exe DefenseEvasion.a!ml

5 posts / 0 new
Last post
SGvagon
Offline
Last seen: 2 years 7 months ago
Joined: 2021-08-12 16:12
CrystalDiskInfo Portable 8.12.5 MSE blocked explorer.exe DefenseEvasion.a!ml

Hello,

I tried download CrystalDiskInfo Portable 8.12.5, at the end of installation I checked option, that I want start program after install. But then explorer.exe shut down/crashed and MSE (Microsoft security essentials) show table with No action necessary. I started explorer.exe via Task Manager and in quarantine MSE I had DefenseEvasion.a!ml virus that is contained in explorer.exe .
So I restarted system and MSE blocked explorer.exe again. Only solution for solving this issue was reinstall MSE.

My question is, is that virus was False positive detection by MSE or not?

Thank you in advance.

John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 39 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
You Can Check

From the CrystalDisk Info Portable homepage, click on AntiVirus Scan just below the Download button. It'll take you to a page with a link to the latest scan in VirusTotal. There, you'll see it has no detections across 68 different antivirus engines, including Microsoft's. I checked in Microsoft Defender in Windows 10, Security Intelligence version 1.3455.416.0 myself as well and both the installer and all contained files come back clean. Make sure you've updated your definitions.

Sometimes, the impossible can become possible, if you're awesome!

SGvagon
Offline
Last seen: 2 years 7 months ago
Joined: 2021-08-12 16:12
Yes, I have the last

Yes, I have the last definition for MSE (I have Windows 7 not Windows 10) . The problem is maybe, that I have changed Windows Orb (Start button icon) , that editing explorer.exe . But I don't understand, that Crystaldisk Info portable installation make this issue with explorer.exe and DefenseEvasion.a!ml virus.
I downloaded Crystaldisk Info portable lots of times without any issues (with changed Windows Orb too) . This is my first case.

And Crystaldisk Info portable installation still have an issue with checking button for start program after installation. Crystaldisk Info portable not start after installation even if I checked the start program after install. Maybe something happened with this and MSE detecting explorer.exe as a virus?

So everything is safe and the virus was false positive?

John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 39 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Maybe

Try disabling your custom start menu icon temporarily and see if that fixes it. If so, it could just be an odd conflict (I doubt anyone tests for something like this) and maybe you can whitelist either your change or CrystalDiskInfo for now. But, yes, I can confirm that CrystalDiskInfo is clean. To be sure, download it from our site using your browser and then check it on VirusTotal.com yourself (anyone can upload and check a file). That will let you ensure you've got the real deal.

Sometimes, the impossible can become possible, if you're awesome!

SGvagon
Offline
Last seen: 2 years 7 months ago
Joined: 2021-08-12 16:12
Ok, thank you for quick reply

Ok, thank you for quick reply. So, I will try load original explorer.exe and download Crystaldisk Info portable from this again when I have some free time to do it. I still hope, that DefenseEvasion.a!ml virus was false positive. I installed this Windows 7 two days ago, so it's almost clean (only drivers, Firefox ESR, MPC-HC, change Windows Start Orb, MSE and now Crystaldiskinfo Portable) .

Log in or register to post comments