Windows Defender reports false positive for PowerShell Modules

Over the weekend, Microsoft released a Windows Defender signature file that falsely reports many PowerShell modules, including PowerCLI as containing a virus.

This is a FALSE POSITIVE widely affecting the PowerShell community.


There is no official statement from Microsoft yet, but the PowerCLI community on VMware {Code} has been working overtime! Here’s what you need to do to get back to automating:

  1. Update Windows Defender Signatures to the latest (>= 1.261.424.0 1.261.459.0).
  2. If your PowerShellGet module was affected, you may need to download manually from Github (https://github.com/PowerShell/PowerShellGet)
    1. Update: Kevin Marquette has a pretty good workaround for PowerShellGet, which reverts back it back to
  3. Release the affected files from Quarantine, or reinstall PowerCLI (Install-Module VMware.PowerCLI -scope CurrentUser -force)

This story is still developing, so I will update as the info comes in.

This is a great time for a shout out to the PowerCLI community on VMware {Code}. Special thanks to the PowerCLI users that have been working on this over the weekend and this morning: Luc Dekens, Edgar Sanchez, Wouter Kursten, Scott Haas, and John Kavanagh

You can join the VMware {Code} Slack by signing up here: https://code.vmware.com/join



23 comments have been added so far

  1. Thee abundant affair about is this website lets you examination songs and
    acqusition the onnes you want, and again save these to your personal
    computer afterwards downloading them so you can accept for them over aand over.

    In fact, my girlfriend was drunk with joy when she found out that a selected database
    features a large choice of potential cute fairy tattoos that they
    could never wish to find in any sesxual affair generic tattoo gallery sites.
    The invitation part is the best thing being
    decorated because cards are beautiful and brimming with lots of pictures like fairy and
    pajama characters.

  2. Sometimes while using the Windows Defender on your system an error code 0X800704EC occurs. This issue can’t be solved by the user. Last day I faced this issues and visit Windows Defender Error Code solution. The solution helps me a lot.

  3. If you are getting a problem while doing your CCTV online, configuration, setup, DVR/NCR or network setup and you are seeking help from an expert technician for a long time? Your search end here! Geek For Tech is the best online remote support service provider and best option for you. Here we provide you almost every solution for your digital devices geek Squad customer service

  4. Is your Alexa device not replying back? Looking for someone who can provide you proper guidance? If yes, then don’t look further than Alexa Helpline. Alexa Helpline is a group of expert technicians who can fix your Alexa device in a short span of time. Alexa Yellow Light

  5. When someone writes an post he/she maintains the thought of a user in his/her mind that how a user can understand it. Thus that’s why this piece of writing is great. Thanks!

  6. Dial Hp Printer Support for qualified tech support 24/7 with instant and effective solutions. we cater to tech issues and supply swift solutions to your tech needs. Our technicians are specialized in HP Desktop Support, Canon, and Brother complete devices. call us at 800-565-9917. Get instant tech support for your printer, laptop, and desktop wants from the best-skilled professionals.

Leave a Reply

Your email address will not be published.