Windows 10: Will Windows Defender still detect and quarantine viruses if I "cancel" a scan before it's...

Hi, friend's computer is infected with some BTC miners and something called a SoundMixer.exe that constantly tries to connect to update023.com. The computer was unable to get on CMD because of some registry autorun command, fixed that through Malwarebytes. Virus protection was also disabled and said "Virus protection is controlled by your organization" but I also managed to turn it back on.


Now doing a full Defender scan but the problem is that one of the drives is dying and I believe that Windows is currently scanning that specific drive right now, which goes extremely slow. I believe the system drive has already been fully scanned, would Defender still quarantine and notify me of the stuff that it already detected before I cancelled it?


Also, if you have any other recommendations disinfecting the PC apart from my question, feel free to tell me.


Thanks.


Running Win 1809.

:)

 

quarantined viruses.

Why does windows defender quarantine some viruses? Why quarantine them? Why doesn't it just delete them?

 

windows defender quarantine

This error in the documentation is causing lots of confusion. You actually can’t review or restore quarantined items in the WDSC Full History page, which corresponds to the All Detected Items page in the classic Windows Defender UI. The Quarantined
Threats list on the Scan History page corresponds to the Quarantined Items page in the classic UI, and that list will display any items that have actually been quarantined as well as provide the options to remove or restore any of those items, as we can see
in this screenshot:

 

windows defender quarantine

Julia,

GreginMich
replied

Where to restore quarantined items in Windows 10 creator update?

Nothing has changed. We still have erroneous status reports in the Full history page just like we did in the All detected items page in the classic Defender interface. If a threat doesn't appear in the Quarantined threats list on the Scan history page,
then it wasn't actually quarantined.

So we need to correct the documentation here:

https://www.microsoft.com/en-us/wdsi/help/antimalware-faq

On Windows Defender Antivirus for Windows 10 version 1703 and later:

• Use the Windows search box to find and open the Windows Defender Security Center
• Navigate to the Virus & threat protection > Scan history.
• Under Quarantined threats, select
  See full history

On earlier versions of Windows:

• Open Microsoft Security Essentials or Windows Defender.
• Click the History tab.
• Select Quarantined items and then View details. You might be asked for an admin password or to confirm your choice.

Once you have reviewed the quarantined items you can:

• Select Remove all to delete all quarantined software.
• Select individual files, and then click Remove or
  Restore.

`~`