Windows 10: I accidentally instaled malicius files which defender determined to be trojan. I have...

So basically I got a message from windows defender that the malicious files were found and i did not open them i only extracted the from .rar. Later i removed them and as i can see there were two dangerous files Loader.exe and GUP.exe now for the GUP.exe i can see that it it has been removed however for the Loader.exe it says the remediation incomplete but also another log threat removed. Now i wonder what caused that to be both. Also the time of the action is the same.I ran the command to log the previous threats and their statuses and saved that in the file: ActionSuccess :

:)

 

Defender flags a Trojan in Pulse VPN install exe file

Thx for the suggestions. When I looked in properties it seemed to suggest it was v8.x, yet the last version I could find to download was v5.x so seemed a bit of a mismatch. I tried 4 or 5 other anti-virus/malware scanners and none flagged this Trojan in
the file. Anyway I took it to our IT to sort out and they got it installed, although I suspect all they did was treat it as a false-positive and Allowed it Defender!

 

Recurrent trojan, HTML/Phish quarantined by Windows Defender, and don't have active option/button to remove as suggested.

Hi Adrianne,

Thank you so much for your reply.

Your info re: "a version update does not provide a clean install" is helpful to know.

I have run the Windows Defender Offline, but never tied running it to the means of removing quarantined files.

In regards to Windows Defender providing file details after a scan, with the suggestion to remove the file, but with no obvious way to do so, like a "remove threat" button, I'm still a little befuddled. Is running the
Windows Defender Offline scan, after I get that suggestion to remove the quarantined file, the one and only way that file is going to be removed? If so, that needs to be made more obvious to the end user, because in my current version, we're given a suggestion
to remove the offending file, but with NO obvious way to do so...not even the instruction that running Windows Defender Offline is the next step to take to remove it.

I'm also curious why this Trojan keeps appearing in C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\.

Is there a Windows app that is making itself a vector online for this trojan?

Again, thank you for your kind reply. I look forward to additional enlightenment.

Kind Regards,