

Preview builds being unsupported translating to it being acceptable to distribute Behavior:Win32/Powessere.SA is as if the Windows Defender team saying they don't need to maintain their antivirus signatures because none of the malware is their own and therefore not their responsibility to support. I know it's not supported, but not providing Behavior:Win32/Powessere.SA has to be maintained at all times. I know this is the wrong place to post this, but this is where Microsoft Support said to. If it's completely unknown how to solve the "Severe" Behavior:Win32/Powessere.SA while downloading build 22610 because it's so new, then it's not that difficult to simply pull 22610 from being available for download. It doesn't matter that it's under development, having a "Severely" malicious update for download is intolerable.

Microsoft Support refused this issue because the operating system is currently under development, as if that makes it any more acceptable to distribute malware through Windows Update. Note that screenshots and other attachments are only visible to Microsoft. This was reproduced 4 times in total, quicker when retrying without having deleted Software Distribution.įeedback Hub link with screenshots, video recording, and diagnostics: At 5%, the Windows Defender notification appeared and the 0xc190011f error code in Windows Update. I performed a Quick Scan and Offline Scan with Windows Defender, updated Emsisoft Emergency Kit and used it to scan from the Recovery Environment, used SFC and DISM, performed a Full Scan, deleted Software Distribution, made a System Image Backup, and installed the 22610 update again. The error code is 0xc190011f and the Windows Defender detection is The Chromium browser was recently updated, so it wasn't an exploit through an outdated browser. Only a blank pen drive was connected recently. 22598 is plenty new, so unpatched vulnerabilities in the existing build shouldn't be why it became infected. The only recent downloads I have were never run. The update errored with 0xc190011f at the same time, so 22610 wasn't installed.

While installing the Windows 11 Dev update to build 22610 today, Windows Defender arrested "Severe" malware, an actively running process, not just an inactive file.
