Call us: 1.800.413.0363
contact@dmeforensics.com
DME Forensics Inc.DME Forensics Inc.DME Forensics Inc.DME Forensics Inc.
  • Virtual Booth
    Wednesdays
    12-1 PM MDT
  • Technology
    • DVR Examiner
    • Forensic Hardware
  • Services
  • Training
    • Upcoming Webinars
    • Past Webinars
    • Video Evidence Recovery and Analysis (VERA) Course
    • DVR Examiner Free Demo
    • Video Library – How To
    • 2021 Events Calendar
  • About Us
    • DME Forensics
    • Contact Us
    • Careers
  • Blog
  • Portal Login

DVR Examiner Install blocked by Windows Defender?

By Rodrigo Sagastegui | DVR Examiner Updates | Comments are Closed | 24 February, 2021 | 5

In 2.9.3 and 2.9.4 versions of DVR Examiner, certain versions of Windows Defender block the installation process; After further investigation, we found that our vendor’s installer software modifies the system screen saver registry:

(SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM|NODISPSCRSAVPAGE)

   This type of action is referred to as “PUM”. As per malwarebytes.com:

“PUM Stands for potentially unwanted modification. This is an alteration made to a computer’s registry (or other settings), which either damages the computer or changes its behavior, without knowledge of the user. Such unwanted alterations can be done by legitimate software, malware, grayware, or PUP.”

   Such potentially unwanted modification caused Windows Defender to identify DVRExaminer.exe as a “Potentially Unwanted Application” (PUA):  PUA:WIN32/COINMINER

   We at DME Forensics, updated to the latest version of our vendor’s installer software, and verified that screensaver registries are no longer modified. Below is the outline on how DVR Examiner is flagged by Windows Defender as PUA in recent installer:

The message above is shown during the installation process
The message above is shown during the installation process

   The report collected by MalwareBytes shows the exact modification of the registry keys by the installer:

Even if the PUM triggered by DVR Examiner’s installer is beyond DME Forensic’s control, we are working with the installer’s software vendor to solve this as soon as possible to avoid this from happening in the future.

We will share an update as soon as this happens, but for now please rest assured it is perfectly SAFE to install DVR Examiner on your system, as we are providing you a 100% legitimate software.

Feel free to contact us if you have any questions or concerns at support@dmeforensics.com .

No tags.

Subscribe to Updates

  Thank you for Signing Up
Sign up to receive our blog updates.
  Please correct the marked field(s) below.
  1,false,1,First Name,2
  1,false,1,Last Name,2
  1,true,6,Contact Email,2
  1,false,1,Company Name,2
*
I am also interested in:

Categories

  • 3.0 Feature Friday (6)
  • DEV @ DME (6)
  • DME Forensics News (23)
  • DVR Examiner (45)
  • DVR Examiner 3.0 (8)
  • DVR Examiner Updates (45)
  • Feature Focus (12)
  • Forensic Case Study (7)
  • Growth in a small forensics company (5)
  • Inside DME (21)
  • Technical Information (24)

Search

DME Forensics

17301 W. Colfax Ave. Ste. 400
Golden, CO 80401
contact@dmeforensics.com
(800) 413-0363

Recent Blog Posts

  • DVR Examiner 3 is now available!
  • Feature Fridays – 3.0 Overview
  • DVR Examiner Install blocked by Windows Defender?

Technical Support

Email: support@dmeforensics.com
Phone: (800) 413-0363
For the latest updates to DVR Examiner, please visit our support portal: https://portal.dmeforensics.com

Copyright 2021 DME Forensics | All Rights Reserved
  • Virtual Booth
    Wednesdays
    12-1 PM MDT
  • Technology
    • DVR Examiner
    • Forensic Hardware
  • Services
  • Training
    • Upcoming Webinars
    • Past Webinars
    • Video Evidence Recovery and Analysis (VERA) Course
    • DVR Examiner Free Demo
    • Video Library – How To
    • 2021 Events Calendar
  • About Us
    • DME Forensics
    • Contact Us
    • Careers
  • Blog
  • Portal Login
DME Forensics Inc.