Windows 10: Windows Defender Removed Trojan:PDF/Phish!MTB

Just ran full scan Windows Defender and above Trojan was removed from 2 pc's running Windows 10 Pro 64 bit Thanks


[Original Title: TrojanDF/Phish!MTB]

:)

 

Recurrent trojan, HTML/Phish quarantined by Windows Defender, and don't have active option/button to remove as suggested.

Hi!

Currently have,

edition Windows 10 Pro

version 1803

OS Build 17134.48

Slow ring with active development

For the last several build downloads, Windows Defender has been quarantining a severe trojan, HTML/Phish, providing file details, the suggestion to remove, but no obvious way to do so, like a "remove threat" button.

Two file examples are:

trojan : HTML/Phish

affected items:

file: C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\S0\116\GEUSE7738644[1175].html

C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\S0\116\GEUSE7738644[1719].html

Now, I will share my lack of expertise by asking why does this trojan keep recurring once quarantined by Windows Defender from build to build?

Is a clean install the only option I have? Kinda' thought that was done with each new build download? Also thought Windows Defender is adaptive/preventive in it's way of staying ahead of threats?

Thank you for any kind instruction and enlightenment.

Kind Regards,

 

Recurrent trojan, HTML/Phish quarantined by Windows Defender, and don't have active option/button to remove as suggested.

Hi Adrianne,

Thank you so much for your reply.

Your info re: "a version update does not provide a clean install" is helpful to know.

I have run the Windows Defender Offline, but never tied running it to the means of removing quarantined files.

In regards to Windows Defender providing file details after a scan, with the suggestion to remove the file, but with no obvious way to do so, like a "remove threat" button, I'm still a little befuddled. Is running the
Windows Defender Offline scan, after I get that suggestion to remove the quarantined file, the one and only way that file is going to be removed? If so, that needs to be made more obvious to the end user, because in my current version, we're given a suggestion
to remove the offending file, but with NO obvious way to do so...not even the instruction that running Windows Defender Offline is the next step to take to remove it.

I'm also curious why this Trojan keeps appearing in C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\.

Is there a Windows app that is making itself a vector online for this trojan?

Again, thank you for your kind reply. I look forward to additional enlightenment.

Kind Regards,

 

Remove a Trojan using Windows Defender.

Yesterday I've downloaded a game but I got a Trojan, sometimes like every 3 hours Windows defender send a notification of it, an "enemy" so It removes the Trojan but the virus comes again, thanks for help

Modified title from: trojan