User Profile Hive Cleanup

[Guest]

A Microsoft program, user profile hive cleanup is being classified by Windows
Defender as a potential unwanted program and is writing a system event to the
log file with each boot. The Windows Defender Software Explorer log:

File Name: uphclean.exe
Display Name: User Profile Hive Cleanup Service
Description: User Profile Hive Cleanup Service
Publisher: Microsoft Corporation
Digitally Signed By: NOT SIGNED
File Type: Application
Auto Start: No
File Path: C:\Program Files\UPHClean\uphclean.exe
File Size: 241725 Bytes
File Version: 1.6.30.0
Date Installed: 4/27/2005 2:59:24 PM
Process ID: 1540
User Name: NT AUTHORITY\SYSTEM
Services: User Profile Hive Cleanup
Classification: In Progress
Ships With OS: No

The Event Viwer Log:

Windows Defender Real-Time Protection agent has detected potential malware.
For more information please see the following:
http://www.microsoft.com
Scan ID: {3D64CB4B-340B-4255-909F-A39A1F765C69}
User: ******\********
Threat Name: Unknown
Threat Id:
Threat Severity:
Threat Category:
Path Found: driver:uphcleanhlp
Threat Classification: Unknown
Detection Type:


Since it is a Microsfot Program that I choose to install, can we please ask
Windows Defender to stop reporting it as malware?

 

[Bill Sanderson]

This should get taken care of over time--the language of the report is
confusing, because it is the same for all such reports, but the key is that
the classification is "unknown."

That just means that they haven't got around to classifying this one yet.

I believe there is a newer version of this available from Microsoft
Downloads, fwiw:

http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en

 

[Guest]

Thank you, Bill Sanderson, I did not realize the UPH-Clean was updated, so
I'm running it now!

 

[Bill Sanderson]

Not sure this will, in fact, change the detection, but it won't hurt!

 

[Guest]

Hi Bill & Happy -

I am encountering the same problem on my tablet pc. I am also running the
prior version. I will also note in this thread if my error goes away with
the result of updated version. I am getting lazy with WSUS distribution. I
don't go out to the MS site to look for updates to the little widgets that MS
provides.

I'll have to post that as a suggestion to the WSUS group.

Cheers,

John McLagan
Johnny on the Spot

 

[Guest]

Hi All -

Just wanted to post back and let you know that was a issue with an older
version being installed. The updated version made the error disappear.

Cheers,

John McLagan
Johnny on the Spot

 

[Bill Sanderson MVP]

Thanks!