Windows 10: Defender reports about every 5 minutes detected and quarantined Trojan:PDF/Phish, run...

brand new 120 gb ssd with up to date Windows 10 installed, no other Antivirus. Keep getting notifications from Virus and Threat Protection, havd found and quarantined TrojanDF/Phish considered severe, every 5 minutes or so. If I run Windows Defender Antivirus it shows nothing. Any ideas or suggestions or thoughts?


Thank you


ps wifes laptop, she passed so replaced hard drive with SSD, very fast.

:)

 

Recurrent trojan, HTML/Phish quarantined by Windows Defender, and don't have active option/button to remove as suggested.

Hi!

Currently have,

edition Windows 10 Pro

version 1803

OS Build 17134.48

Slow ring with active development

For the last several build downloads, Windows Defender has been quarantining a severe trojan, HTML/Phish, providing file details, the suggestion to remove, but no obvious way to do so, like a "remove threat" button.

Two file examples are:

trojan : HTML/Phish

affected items:

file: C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\S0\116\GEUSE7738644[1175].html

C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\S0\116\GEUSE7738644[1719].html

Now, I will share my lack of expertise by asking why does this trojan keep recurring once quarantined by Windows Defender from build to build?

Is a clean install the only option I have? Kinda' thought that was done with each new build download? Also thought Windows Defender is adaptive/preventive in it's way of staying ahead of threats?

Thank you for any kind instruction and enlightenment.

Kind Regards,

 

Recurrent trojan, HTML/Phish quarantined by Windows Defender, and don't have active option/button to remove as suggested.

Hi Adrianne,

Thank you so much for your reply.

Your info re: "a version update does not provide a clean install" is helpful to know.

I have run the Windows Defender Offline, but never tied running it to the means of removing quarantined files.

In regards to Windows Defender providing file details after a scan, with the suggestion to remove the file, but with no obvious way to do so, like a "remove threat" button, I'm still a little befuddled. Is running the
Windows Defender Offline scan, after I get that suggestion to remove the quarantined file, the one and only way that file is going to be removed? If so, that needs to be made more obvious to the end user, because in my current version, we're given a suggestion
to remove the offending file, but with NO obvious way to do so...not even the instruction that running Windows Defender Offline is the next step to take to remove it.

I'm also curious why this Trojan keeps appearing in C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\.

Is there a Windows app that is making itself a vector online for this trojan?

Again, thank you for your kind reply. I look forward to additional enlightenment.

Kind Regards,

 

Trojan in Allowed Items and Quarantines

Windows Defender detected a Trojan Virus on a full scan. When I reviewed the history it indicated that the Trojan was in "allowed threats" as well as in "quarantined threats." How could that happen? How can I find out if the virus was removed?

[Original Title: Trojan virus]