Windows 10: CONVERSATIONS TO HAVE DURING QUARANTINE

:Hey, Cortana....how's the Master Chief?"



:)

 

Windows Defender is missing Restore Button for Quarantined Threats

It wasn't listed under "Quarantined Threats", but was listed in "See full history" as quarantined. It has been about 2 hours
and now it is listed under "Quarantined Threats" which now shows the Restore or Delete options. Something must be causing
a delay in listing the quarantined file under "Quarantined Threats" after they have been found and quarantined by Defender.

 

Where to restore quarantined items in Windows 10 creator update?

Hi,

As per the description of the issue, you would like to know how to restore files that has been quarantined by Windows Defender. For us to assist you, here's a simple guide on how to see where the quarantined files are located:

• Open Windows Defender.
• Go to History tab.
• In the History tab, check for Quarantined items.
• Place a check on the file that you want to restore, this should enable
  Allow item.
• Press Allow item, this should bring the file back to the original location.

To check where the files are located, kindly follow the steps listed below:

• Open Windows Defender.
• Go to History tab.
• In the History tab, check for Quarantined items.
• Click on view details.
• In the description, it will show you the file path where it is located.

Let us know if the resolution provided works.

 

Quarantined Trojan:JS/Flafisi.B

Trojan:JS/Flafisi.B threat description

When Windows Defender detects and quarantines a threat you are protected and the quarantined item/file/threat cannot harm your computer anymore. Also: Quarantined items will be removed automatically after some time.

That being said...

Why you cannot find/see a Remove possibility, I do not know.

I'm not a Windows 10/Windows Defender user so I'm not 100 % sure that the below from this site (https://www.microsoft.com/en-us/wdsi/help/antimalware-faq)
copied/pasted info is correct (later EDIT: info is not correct. See my other replies!):

On Windows Defender Antivirus for Windows 10 version 1703 and later:

• Use the Windows search box to find and open the Windows Defender Security Center
• Navigate to the Virus & threat protection > Scan history.
• Under Quarantined threats, select See full history

Once you have reviewed the quarantined items you can:

• Select Remove all to delete all quarantined software.
• Select individual files, and then click Remove or
  Restore.
• Select Quarantined items and then View details. You might be asked for an admin password or to confirm your choice.

======

I've seen other posts on a similar threat detection for Flash Player where the user also said he didn't have the Remove option...

See here:

• Problem Removing Trojan:JS/Flafisi.C (page=2) (jamesvandenbosch December 30, 2017)
• Problem Removing Trojan:JS/Flafisi.C (page=2) (jamesvandenbosch December 30, 2017)

====

Suggestion to upload the detected file to MS:
Submit files for malware analysis

and to also upload it to VirusTotal and/or any other service listed here:
List of Online File analyzers & services

In addition you might want to run some scans with one or the other tool mentioned here:

List of Malware Removal Tools