Rem0o
Windows Defender can remove FanControl.sys
Describe the bug
Windows Defender can detect FanControl.sys and remove it so the app no longer works.
With no ability to restore or exclude other than using complex options.
Screenshot:
Docs: Offical MS Docs for Troubleshoot attack surface reduction rules
"Your administrator has....", so you are not admin on that machine or you are part of an enterprise domain?
I noticed that too, the user is Admin. Windows Defender just acts and deletes the suspected file.
Nope, no easy option for that except for complex manual methods: Add exclusions for a false positive.
The problem still exists in V186 on Windows 10. https://www.defenderui.com/ - ASR - Change the "Block abuse of exploited vulnerable signed drivers" to audit mode seem fix it.
