Windows 10: Windows Defender states "Remediation Incomplete". Is the detected threat removed?

Hello,


I recently got an alert from Windows Defender stating that an unsafe file with a Severe Alter level was found on my computer after opening a .iso file.

I assume that there was a potentially dangerous file within it, which caused the alert to be triggered. I deleted that file immediately and did a quick scan to double check if any other risks could be identified, but nothing seemed to have been detected.


The file that was detected as a threat was "occamy.c". Some research tells me that this file hides in your computer and stays there for a while, collecting data until it is sent to the attacker. I checked all of the directories and suggestions that various websites suggested to check for any suspicious files, and I could not find anything, so I am hoping that I am safe.


I checked Windows Defender afterwards, and it still said "Remediation Incomplete". I am unsure of what this is supposed to mean - did Windows Defender remove the file? Is it partially removed from my machine? I would like to what this actually means and if there are any specific actions I should take to ensure that my machine is safe, which I rely on for my studies and work.

:)

 

Windows Defender remediation incomplete - Trojan:Win32/Wacatac.C!ml

Trojan:Win32/Wacatac.C!ml

Windows Defender not able to remove that virus. Plz help how to remove it.

I already run
Microsoft Safety Scanner (64-bit). But virus still in my pc

Now Defender shows remediation incomplete Severe

 

Remediation Incomplete

Hello i'm Timon and i'm glad to help you.

If Windows Defender considers this file dangerous, it probably is.

You should remove the exception in Windows Defender.

Navigate to:

Settings --> Windows Defender Security Center --> Virus & Threat Protection --> Threat History

So once you're at Threat History, just look at Allowed Threats, click at the concerned threat, and click on "Don't Allow" then it just removes that threat from the allowed list.

Just to be 100% sure, you can send the file to
https://www.virustotal.com

This will confirm (or not) if the file is dangerous.

Disclaimer:

This is a non-Microsoft website which would provide accurate and safe information. Watch out for ads on the site which are frequently classified as a PUP (Potentially Unwanted Products).

 

Windows Defender Stuck on Removing Severe Threat

Sure, you can put Windows Defender Offline on a jump drive.

But the emphasis of my post is that you no longer have to do that ...
you can launch Defender Offline from Settings > Update and Security > Defender > Defender Offline
as described here: Defender Offline

simrick (safe mode Adwcleaner with a question about the reg entires) and Borg (tdssKiller, Rkill, possible manual reg entries removal) have offered other suggestions - it helps troubleshooting if you always follow the order of the suggestions and report the results.

When you've completed all on-demand scans and other remediation steps, run the following (both commands take a while to complete).

If there are any integrity issues reported in the results on the screen,

Launch Command Prompt (Admin)

Dism /Online /Cleanup-Image /RestoreHealth

SFC /ScanNow