Windows , Windows Defender ATP 10 's built-in antivirus software , uses machine learning algorithms and models to detect and block suspicious files on system your . Many consider it to be a very good antivirus . However, there is one small issue.
Sometimes, some legitimate programs may be detected as malicious by Windows Defender.
This recently happened with the “Winaero Tweaker”. Users are reporting that the popular Windows tweaking app has been flagged as “potentially unwanted software” or “Hacktool” by Windows Defender.
The application, which allows you to customize Windows, was removed by Windows Defender, as it detected the executable file as “HackTool:Win32/WinTweak” or “!#UACTrigger.A”.
As explained , the Winaero application is not a “potentially unwanted software” as it simply allows users to customize the Windows experience.
Windows antivirus uses heuristics and AI to categorize programs as malicious, but sometimes these “smart systems” make mistakes.
“The downside to this smart approach is that some of our more aggressive classifiers occasionally misclassify legitimate files as malicious (false positives),” said Michael Johnson, a member of the Windows Defender Research team. He added that the errors are very few compared to the correct malware detections that protect the customers .
This incorrect detection has been fixed in version 1.313.1221.0 of Windows Defender's antivirus definitions.
Users can manually update Windows Defender definitions by going to Windows Security > Virus & threat protection and clicking the “Check for updates” link.
If systems are not updated, WinAero Tweaker will continue to be blocked.
