(Use advanced protection against ransomware) (Block Office applications from creating executable content) If you are using Windows Defender security intelligence version lower than 1.355.1377.0 and the following two Windows Defender ASR rules are set, the execution of either think-cell's tcaddin.dll or tcasr.exe is blocked and the file is deleted: The problem occurs with Windows Defender security intelligence version between 1.353.694.0 and 1.355.1377.0 when the following Windows Defender ASR rules are set.If you find a Warning, select it and check if the General tab shows think-cell's installation path and the ID: 3B576869-A4EC-4529-8536-B80A7769E899, e.g.: If yes, open the Windows Event Viewer and go to the following path:Īpplication and Services Logs → Microsoft → Windows → Windows Defender → Operational
