Forum Discussion

MCT

Jan 13, 2023

Solved

Antivirus deletes all shortcuts from the desktop

After this morning's update of security intelligence to version 1.381.2140.0, defender is deleting on all clients all links to applications; does anyone have the same problem?

yongrheemsft
Jan 14, 2023
https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/recovering-from-attack-surface-reduction-rule-shortcut-deletions/ba-p/3716011

yongrheemsft

Microsoft

Jan 13, 2023

@michelariis, please open a MS CSS support ticket, and mark it as a Sev-A.
Thx,
Yong Rhee - MSFT

sjansen
Brass Contributor
Jan 13, 2023
We also see some other files affacted, for examples .xml files and Microsoft Store Apps like Picture.library-ms and some other.
sjansen
Brass Contributor
Jan 13, 2023
We are also affected, started around 10:30am GMT+2. We saw Defender deleting .lnk files and also blocking/deleting Windows Store Apps from Microsoft. We changed the affected ASR rule and try to force all clients to sync, but it may be to late from my reports we got so far.