Win Defender Scan History Delete has permission problems. PUA: Win32\PassRecovery

Sep 25, 2020
Reaction score
I understand this is a long-time problem, but I nevertheless wonder if I have been compromised.

From Windows security
Detected: PUA:Win32/PassRecovery
Status: Active
Active threats have not been remediated and are running on your device.
Date: 2023-10-27 9:57 PM
Details: This program has potentially unwanted behaviour
Affected items:
file: D:\2023-10-08-Longterm\SWTools\Advanced PDF PWD recovery utility\ (This folder and file could not be found on any device.)

Trials at Administrator delete of scan logs don't seem to work via C:program Data...don't have sufficient permission (limited to "SYSTEM") and can't add or alter users or groups. Security tab lists Account Unknown (S-...).
Event Viewer access seems to remove detection events, but restart still shows PUA.

Is the permissions problem because Win Defender is operational?? If so how you stop it to allow deletion of scans history?

Edition Windows 10 Pro
Version 22H2
Installed on ‎2022-‎02-‎22
OS build 19045.3693
Experience Windows Feature Experience Pack 1000.19053.1000.0
Last edited:

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question