As at work my major OS is Windows, I come across all sorts of mishaps, incompatibilities, and weird behaviors. At home, I’ve been running and updating the always-latest Debian, and nothing ever happens. Of course, I'm not joined to a domain, nor are my admin rights/GPOs/user rights handled by 10 different people, nor am I using a mix of connections from Wi-Fi / cable local / VPN. Those all mess things up.
This time, a problem from 2020 popped up on a near-latest Windows 11: a failed download issue.
Failed - Virus detected.
In French: Impossible de télécharger - Virus détecté.
But actually, there is no virus. It’s just abnormal behaviour from Windows toward its browsers, caused by the antivirus. It can go haywire and we don't know why. You can have Windows Defender and it can still happen. Online, most people complain about McAfee. I experienced it with Kaspersky. Most probably, this happens—like always—due to the mixture of hardware components, browser version, Windows version, and the latest Windows update. Just to say: we don't know.
You might succeed with tricks like turning OFF SmartScreen, doing a Windows update, then turning it back ON, then restarting your PC like 5 times. Some people do a total uninstall of the antivirus, a registry clean, a cleaning of browser data, and a fresh reinstall of the latest Windows update—then the antivirus. They succeed. Some do the same and don’t!
In a company environment, you don’t just totally uninstall anything security-related, especially since you have to act fast with the least restarts possible. Some of the PCs are fast and snappy, with instant lock-in of distant connections. Some might need obligatory user interaction to connect in any case—TV, RDS, AnyDesk, or VNC.
I found that this is the easiest way to solve the problem, with the least harm and the fastest. Till now, it always worked.
First, you either have to modify or create a registry key and restart your PC afterwards.
Start Registry Editor.
Locate the following registry subkeys: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
Right-click the ScanWithAntiVirus DWORD value, and then click Modify.
In the Value data box, type 1, and then click OK.
Exit Registry Editor.
Log off and log in to Windows to make the change take effect.
Open or save the program or file that you failed before.
 | |
| Please NOTE that the image shows the Microsoft ideas of doing the change in HKEY_CURRENT_USER. That is not going to work. You must act on HKEY_LOCAL_MACHNIE like I had written it ! |
This actually turns the Aggressive scanning procedure to a more contextual based scan. It won't turn it off. That would be bad. It makes it acting smarter.
No comments:
Post a Comment