Windows 10: Trojan:Script/Oneeva.a!ml is removed from quarantine every day at 3:17am

Since April 4th Microsoft Defender reports that Oneeva is being removed or restored from Quarantine, multiple times per day as well as 3:17am.


I have run a complete scan, twice, and it finds nothing. I have even done Defender Offline, nothing.


Who or what is doing this?


Eventually, 5 copies of PowerShell are running consuming all my CPU time. I can't find what's doing that. A reboot clears that conditions for a few days.


I suspect I am under the control of a BOT.


I am up to date as far Windows Update goes.

:)

 

how to remove a trojan threat that is Quarantined

On the page it does not say remove threat anywhere. So how do I remove a Quarantined Trojan and i have 2 of them got at the same time. Both the same Trojan.

 

How do I remove quarantined threats

Windows Defender did what it is designed to do - quarantined a Trojan. Now I would like to remove it from quarantine. How do I do that? I know Windows says it will removed periodically, but I do not know how long that may be, so would like to manually get it off of my system now.

The quarantine history also lists the same threat 3 times with the same date. Does that mean it tried to enter my system 3 times in the same day?

 

Trojan in Allowed Items and Quarantines

Windows Defender detected a Trojan Virus on a full scan. When I reviewed the history it indicated that the Trojan was in "allowed threats" as well as in "quarantined threats." How could that happen? How can I find out if the virus was removed?

[Original Title: Trojan virus]