Skip to content

Improve documentation about Windows Defender blocking malware (#442)#744

Open
sam-coolshrestha wants to merge 2 commits intomandiant:mainfrom
sam-coolshrestha:main
Open

Improve documentation about Windows Defender blocking malware (#442)#744
sam-coolshrestha wants to merge 2 commits intomandiant:mainfrom
sam-coolshrestha:main

Conversation

@sam-coolshrestha
Copy link

Summary

This PR improves the troubleshooting documentation by explaining why Windows Defender may still block malware samples even after registry modifications.

Changes

Related Issue

Closes #442

@google-cla
Copy link

google-cla bot commented Mar 6, 2026

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@sam-coolshrestha
Copy link
Author

/cla recheck

Added a legal notice regarding the usage and licensing of the script.
@sam-coolshrestha
Copy link
Author

Hi! I’ve signed the Google CLA and the check is now passing. Please let me know if any changes are needed. Thanks for your time!

@PrajeetGuha
Copy link
Contributor

Hello @sam-coolshrestha,
Thank you for your contribution!

Can you give very specific ways to troubleshoot the errors? Disabling GPO and related pointers are already added at the top of the documentation but yet sometimes malware is blocked by Windows 10. So, can you make the pointers with specific troubleshooting steps rather than general pointers?

Also can you check the same for Windows 11?

It will be better if the guide provides some solution walkthrough.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Why is Windows 10 still blocking me from running malware?

2 participants