Windows 10: 2 items in Protection history: Remediation incomplete, and Threat removed or restored

So I unfortunately got the Bearfoos trojan. My first virus and a terrible one... Trojan:win32/Bearfoos.A!ml


I ran Windows Defender and in Protection history there is one section that says “Threat removed or restored” and one that says “Remediation incomplete”. Does this mean it’s still in the system? I’m running a full scan that’s about 4/5 through but I don’t know what those results mean.

:)

 

Remediation Incomplete

Hello i'm Timon and i'm glad to help you.

If Windows Defender considers this file dangerous, it probably is.

You should remove the exception in Windows Defender.

Navigate to:

Settings --> Windows Defender Security Center --> Virus & Threat Protection --> Threat History

So once you're at Threat History, just look at Allowed Threats, click at the concerned threat, and click on "Don't Allow" then it just removes that threat from the allowed list.

Just to be 100% sure, you can send the file to
https://www.virustotal.com

This will confirm (or not) if the file is dangerous.

Disclaimer:

This is a non-Microsoft website which would provide accurate and safe information. Watch out for ads on the site which are frequently classified as a PUP (Potentially Unwanted Products).

 

How do I remove quarantined threats

Thanks for your quick reply, and the link. Unfortunately, it looks like the instructions at that link do not apply to my version Defender. It says:
1: Open Windows Defender Security Center from the system tray area.OK2: Once opened, click on the first menu option that says “Virus & threat protection”.OK3: Now look for ‘Scan History’ just below the title and description.I do not have a Scan History, but do have Threat History. So I open it . Then it says4: Once you are inside ‘Scan History’, look for ‘Quarantined Items’ and then click on ‘See Full History’ to view all the quarantined items.OK5: You can easily remove quarantined items by hitting the Remove button. Otherwise, you can restore them back by clicking on the Restore button.Here, there is no Remove button in my version; only Allow. Also there is no help when I open See Details. See attachments.
I'm running Win10Pro, v1803 build 17134.48

 

How can I get my files restored from Windows Defender quarantine?

Hello my name is Yohandi.

It is a pleasure to have your participation in the Microsoft Community

To restore the items that are in the Windows quarantine, defend the steps shown below.

1- Open Windows Defender> Virus and threat protection

2- Go to Threat History tab.

3- In the History tab, check for Quarantined items.

4- Place to check on the file that you want to restore, this should enable Allow item.

5- Press Allow item, this should bring the file back to the original location.

To check where the files are located, kindly follow the steps listed below:

Open Windows Defender.

Go to History tab.

In the History tab, check for Quarantined items.

Click on view details.

In the description, it will show you the path where it is located.

I wish you an excellent day!

I hope it works for you