New
#1
Removal of threat Trojan: Status FAILED (Remediation incomplete)
Windows Defender recently indicated I had "severe" threats. They identified these as Trojans, with full details, and informed me in a note below that these were identified and removed by Defender's antivirus. However, Protection History is showing one as " Remediation incomplete" after I clicked on "take action" , with status :"failed" and warnings of danger. I find Microsoft's "communication skills" ambiguous and contradictory. Another "severe threat" item, after "take action" is chosen, is shown as "Removed or restored". What does that mean? I WANT it removed---NOT restored! There is no other "Action "option once the initial one has supposed to have been affected, even if it is shown as "Failed". Just to confuse the issue further, "Security at a glance" shows all the green boxes ticked and "no action needed".
Even more confusing, I had run a quick scan, a full scan, and a custom scan and they all told me that there were "no current threats", then went on to say "1 threat found"! I also did an "offline" scan, which is supposed to find threats that the others miss, but I have no idea whether it did or not, as it simply restarts your Computer, spends half an hour or more scanning, then disappears from the screen without apparently showing any report or results, and restarts the Computer to back where you started.
With another Trojan that it had declared "quarantined" (for once something reassuring) I was given an "action" option, and I selected REMOVE (the other option was Restore). However, in a further act of inexplicable ambiguity, the same item came up again in a later scan, showing this time as "Removed or Restored" (so I am hoping that means the other item already labelled "removed or restored" has actually been removed, but I cannot be sure!
Finally, late last night, I did ANOTHER FULL SCAN (took 4hours 43 minutes) which produced a report showing "no current threats" and ALSO "ZERO threats found." It also reported virus and threat settings and ransomware protection as "no action needed" and security intelligence as up to date. So far as Defender is concerned, it is telling me I have no problems. Yet, under Protection History, I STILL have: "Remediation Incomplete "
Detected: Trojan:Script/Sabsik.FL.A!ml
Status: Failed
This App or threat might not be completely remediated.
This is program is dangerous and executes commands from an attacker.
Can anybody help with reassurance? All attempts on the web I have made to search for advice ONLY bring up info. that sometimes Defender flags up "false positives," and they suggest complex methods of how to remove the message! (Much like "shooting the messenger" so you don't have to hear the message!") What they DONT address is what to do if it is NOT a false positive and Defender has NOT removed this known virus as it claims to do.
Can anybody help with reassurance or advice. please? Mike 707 Windows Version 22H2 (OS Build 19045.4291)
Quote