Recently, we noticed a lot of programs, including Tweaking.Com Windows Repair being flagged as infected with the Win32/Critet.BS. The only problem here is Microsoft is the only one flagging it, and they don't bother telling you what it is.



All Microsoft says is that the trojan is severe and that it could "can perform a number of actions of a malicious hacker's choice on your PC." Vague much?

It is not just Tweaking.com's programs that are being affected by this false positive. It would appear, at a glance, that this is due to programs that use .NET. There are reports of a number of programs being detected for the same thing like Kerbal Space Program, Jaccket Tray, Free Audio Converter and more.

It does appear that Microsoft had removed the trojan from their list but added it back according to to the 1.263.598.0 changelog. We assume this means it's making a comeback, but were disappointed by the false positives.

We recommend you make sure your Windows Defender is up to date, and if possible, report false positives to Microsoft. As far as we can tell, Microsoft is aware and has made changes to in the latest virus definitions.

comments powered by Disqus