Windows 10: Find out more about file removed by Windows Defender

I ran a full scan with Windows Defender and it found and deleted a Trojan virus. Now I would like to find out more about this virus, especially where it came from and when it was saved on my pc, but all I can see inProtection history is its location and name container file andfile.

I have searched online the name of the infected file but didn't find anything. I hope there is a way to find out more, this information is obviously very important for security reasons and it would be absurd if it wasn't available.

:)

 

Windows Defender - File Removed

Windows defender has removed file from my PC as being a medium level threat, I know this file and I also know that windows detects it a false positive.

I want Windows defender to return the file to where it was removed from, but am unable to get it to do this.

I go into defender and its not listed under Quarantined Items.

but is listed under all detected Items. How can I find this file and return it to where it should be?

Peter

 

Unable to Remove Exclusions from Windows Defender

Thank you for posting back. If you trust a file, file type, folder, or a process that Windows Defender Antivirus has detected as malicious, you can stop Windows Defender Antivirus from alerting you or blocking the program by adding the file to
the exclusion list. It seems that it was added automatically. We suggest that you follow these steps:

• Go to Settings and select Update & security.
• Click Windows Defender.
• Look for Exclusions and select Add an exclusion.
• Navigate to the file, folder, or process, and select Exclude this file.

If the steps provided did not work, we recommend that you boot your device to
Safe Mode and redo the process.

Let us know if you need further assistance.

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.