Does CFW interfere with Windows Defender activities?

Looking at CFW events, I saw the report I quote, reformatted and translated:

Application Action Target
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe Modify File C:\Windows\TEMP\MpCmdRun-68-421CFC91-A93E-42AB-A35C-F06F127FCC44.lock
Alert Type Description Advice Answered Answer
HIPS alert MpCmdRun.exe is trying to create a new file or folder MpCmdRun.exe is a secure application signed by Microsoft Windows Publisher. It is about to create a new file/folder in C:\Windows\TEMP\MpCmdRun-68-421CFC91-A93E-42AB-A35C-F06F127FCC44.lock. This activity is normal when installing/updating/downloading/copying a program. If you are not doing any of these things you should block this request. Invalid DateTime Show

I wanted to know if this somehow interferes with the operation of Defender, and if so how to avoid it, since I think that if I create a rule for MpCmdRun.exe, in a future Defender update, the folder that carries the version number will be renamed.

It doesn’t interfere with Defender at all as Windows/Microsoft files are automatically trusted. You may just see a log entry when it’s first observed when CFW checks that it’s safe.

1 Like