Threat description search results - Microsoft Security Intelligence (2024)

Attention: We will be transitioning to a new AAD or Microsoft Entra ID from the week of May 20, 2024. In case your tenant requires admin consent, please refer to this document located at Overview of user and admin consent - Microsoft Entra ID | Microsoft Learn and grant access to App ID: 6ba09155-cb24-475b-b24f-b4e28fc74365 with graph permissions for Directory.Read.All and User.Read for continued access.

Send us feedback

Thank you for your feedback

56 entries found. Displaying page 1 of 3.

HackTool:Win32/AutoKMS

Updated on Jan 05, 2017

Windows Defender detects and removes this threat.

It can be used to "crack" or patch unregistered copies of Microsoft software.

Don't use hacktools as they can be associated with malware or unwanted software. We have seen malware distributed with these tools.

Alert level: high

HackTool:Win32/AutoKMS!rfn

Updated on Apr 13, 2018

Windows Defender detects and removes this threat.

It can be used to "crack" or patch unregistered copies of Microsoft software.

Don't use hacktools as they can be associated with malware or unwanted software. We have seen malware distributed with these tools.

Alert level: high

HackTool:Win32/AutoKMS.B

Updated on Oct 31, 2018

Alert level: high

HackTool:Win32/AutoKMS.C

Updated on Dec 06, 2018

Alert level: high

HackTool:Win32/AutoKMS.D

Updated on Dec 24, 2018

Alert level: high

HackTool:Win32/AutoKMS!cl

Updated on Feb 05, 2018

Alert level: high

HackTool:Win32/AutoKMS.SA!MSR

Updated on Aug 14, 2019

Alert level: high

HackTool:Win32/AutoKMS.NK!MTB

Updated on Nov 06, 2019

Alert level: high

HackTool:Win32/AutoKMS!ml

Updated on Dec 23, 2019

Alert level: high

HackTool:Win32/AutoKMS!MSR

Updated on Sep 24, 2019

Alert level: high

HackTool:Win32/AutoKMS.E!MSR

Updated on Sep 27, 2019

Alert level: high

HackTool:Win32/AutoKMS!atmnm

Updated on Sep 24, 2020

Alert level: high

HackTool:Win32/AutoKMS!MTB

Updated on Oct 23, 2020

Alert level: high

HackTool:Win32/AutoKMS.S!MTB

Updated on Oct 30, 2020

Alert level: high

HackTool:Win32/AutoKMS.NK!rfn

Updated on Dec 12, 2020

Alert level: high

HackTool:Win32/AutoKMS.E

Updated on Jun 25, 2022

Alert level: high

HackTool:Win32/AutoKMS.RS!MTB

Updated on Nov 18, 2022

Alert level: high

HackTool:Win32/AutoKMS!pz

Updated on Sep 15, 2023

Alert level: high

HackTool:Win32/AutoKMS!mclg

Updated on Jul 18, 2021

Alert level: high

PUA:Win32/AutoKMS

Updated on Jun 29, 2016

This application was stopped from running on your network because it has a poor reputation. This application can affect the quality of your computing experience. We have seen this leading to the following potentially unwanted behaviors on PCs:

  • Adds files that run at startup

These applications are most commonly software bundlers or installers for applications such as toolbars, adware, or system optimizers. We have observed this application installing software that you might not have intended on your PC.

If you were trying to install an application, you might have downloaded it from a source other than the official product's website.

We usually see this application installed on PCs in the following countries. This list is sorted according to prevalence:

  • United States
  • Brazil
  • Russia
  • China
  • Spain

This detection is part of our extended Potentially Unwanted Application protection feature.

Alert level: severe

Threat description search results - Microsoft Security Intelligence (2024)

FAQs

How do I see threat details in Windows Defender? ›

View and manage threat detections in the Microsoft Defender portal
  • Go to the (Microsoft Defender portal) and sign in.
  • In the navigation pane, choose Threat Analytics to see all the current threats. ...
  • Select a threat to see more details about the threat.
  • In the table, you can filter the alerts according to many criteria.
May 31, 2024

How do I fix Microsoft Defender antivirus found threats? ›

You can use filters to find recommendations, quarantined, cleaned, blocked, or severity. You can also clear your filter history from the filters dropdown. As mentioned earlier, you can click on any blocked threat, scroll down to the bottom of the details, and find the Actions dropdown. Click on that and click on Allow.

Does Microsoft have a threat intelligence platform? ›

Microsoft Defender Threat Intelligence (MDTI) contains a repository of raw and finished Microsoft threat intelligence. This intelligence helps professionals analyze and act upon the trillions of security signals collected by Microsoft and processed by security experts and machine learning.

Why is Windows Defender taking so long to remove a threat? ›

The virus may be actively trying to resist removal, which can slow down the process.

How do I scan for threats on Windows? ›

Run an advanced scan in Windows Security

Under Current threats, select Scan options (or in early versions of Windows 10, under Threat history, select Run a new advanced scan). Select one of the scan options: Full scan (check all files and programs currently on your device) Custom scan (scan specific files or folders)

Why can't Windows Defender remove threats? ›

Make sure you have enough available disk space

Microsoft Defender Antivirus requires disk space to remove and quarantine malware files. It might be prevented from completely removing a threat if there isn't enough available space on your PC, particularly on your system drive (usually drive C).

How do I get rid of fake Windows Defender security warning? ›

Remove Windows Defender security warning from your browser
  1. Click on the three dots at the top right corner.
  2. Choose “Settings”.
  3. Click “Advanced ” in the bottom left of the window.
  4. Press ”Reset and clean up”.
  5. Choose “Restore settings to their original defaults”.
  6. Click “Reset settings”.
Nov 15, 2023

How to access Microsoft Threat Intelligence? ›

Open Defender TI in the Microsoft Defender portal
  1. Access the Defender portal and complete the Microsoft authentication process. Learn more about the Defender portal.
  2. Navigate to Threat intelligence. You can access Defender TI in the following pages: Intel profiles. Intel explorer. Intel projects.
Apr 24, 2024

Is Microsoft Defender threat intelligence free? ›

Explore Defender Threat Intelligence licenses

Use this free version of Defender Threat Intelligence to address global cyberthreats.

What is the new name for Microsoft Threat protection? ›

Microsoft 365 Defender

How do I view quarantined threats in Windows Defender? ›

On your Windows device, open Windows Security. Select Virus & threat protection and then, under Current threats, select Protection history. If you have a list of items, you can filter on Quarantined Items.

How do I see Windows Defender activity? ›

How do I view a Microsoft Defender Antivirus event?
  1. Open Event Viewer.
  2. In the console tree, expand Applications and Services Logs > Microsoft > Windows > Windows Defender.
  3. Double-click on Operational.
  4. In the details pane, view the list of individual events to find your event.

Top Articles
Latest Posts
Article information

Author: Rob Wisoky

Last Updated:

Views: 6277

Rating: 4.8 / 5 (48 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Rob Wisoky

Birthday: 1994-09-30

Address: 5789 Michel Vista, West Domenic, OR 80464-9452

Phone: +97313824072371

Job: Education Orchestrator

Hobby: Lockpicking, Crocheting, Baton twirling, Video gaming, Jogging, Whittling, Model building

Introduction: My name is Rob Wisoky, I am a smiling, helpful, encouraging, zealous, energetic, faithful, fantastic person who loves writing and wants to share my knowledge and understanding with you.