Defender BlockMsav.A!reg msmpeng.exe Revisited

[dallas7]

@Ken_GlassWire

Both of the rules you mentioned that are added by GlassWire are “allow” rules. This is rule is to avoid a malware notice by Windows Defender.

I understand that. What I I’m pointing out is the path is to a folder that no longer exists. It may or may not be contributing to this issue.

@Ken_GlassWire

I used our “Block all” mode today and I could recreate something similar to this

Now that I’m thinking about it more, when I run Thunderbird in a VeraCrypt container, I have to change from Ask To Connect to Click To Block. I’ve been having to do that for years.

Thunderbird in VeraCrypt & Rule Funk

I just got done closing out of TBird/VCrypt and I am now considering that when I was wanting to return to Ask To Connect, it is quite possible I overshot when moving from Click to Block and hit Block All by accident.

@Ken_GlassWire

What is your opinion

Well, fix that. IMHO, you can get rid of Block All altogether. Or maybe your Block All could be a function to disable the connection, as one can do in the Network and Internet\Network Connections Control Panel.

One way or the other, make the Block All button separate and distanced from the Ask To Connect/Click To Block selector.