Windows 10: I cant get windows threat protector to remove a file

Every time I run a scan it detects PUABundler:Win32/CheatEngine as being active and of low threat, I try and take action to remove it but every fresh scan the same file is detected. Malwarebytes doesn't detect anything but I still don't feel confident

:)

 

WINDOWS DEFENDER IS NOT REMOVING THREATS

Hello PaulPChou,

This one works. You're correct I chose removed but it just doesn't remove the threats it says working and after working the threats are still listed. I ran the safety scanner, reboot, scan in safe mode, scan in clean boot but neither of those works to remove
the listed threats.

Just as I thought all I need is to manually delete the file where it contains the threats list just like a log file.

Thanks for providing the path where it stores the list.

Best regards,

Lelouch

 

Threats detected by Windows Defender

If you really want to be sure if those threats are removed completely then I would suggest to clean install Windows. That’s the only way to know for sure. And always disconnect from the internet next time you encounter malware. That’s the first step to take, especially if you have more than one computer sharing the same network.

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.