Windows 10: unable to remove trojan with windows defender offline scan

### *Remediation Incomplete* *Date:* 12/03/2025 3:50 AM *Severity:* Severe ### *Detected using Microsoft Defender Antivirus offline scan* - *Detected:* Trojan:Win64/Malgent!MSR - *Status:* Quarantine failed - *Message:* This threat or app might not be completely remediated. - *Details:* This program is dangerous and executes commands

:)

 

Windows Defender cannot remove Trojan:BAT/Poweliks.A

Windows Defender has detected Trojan:BAT/Poweliks.A. However, it is unable to remove it. I also scanned with Windows Defender Offline. Still have the Trojan. Any suggestions?

 

Run windows defender offline with a Full Scan

Hello,

How to run a full scan with windows defender offline? By default, windows defender offline runs a quick scan. How can I override this? I'm trying to remove trojan downloader:win32/ by using windows
defender, but it didn't work.

 

Recurrent trojan, HTML/Phish quarantined by Windows Defender, and don't have active option/button to remove as suggested.

Hi Adrianne,

Thank you so much for your reply.

Your info re: "a version update does not provide a clean install" is helpful to know.

I have run the Windows Defender Offline, but never tied running it to the means of removing quarantined files.

In regards to Windows Defender providing file details after a scan, with the suggestion to remove the file, but with no obvious way to do so, like a "remove threat" button, I'm still a little befuddled. Is running the
Windows Defender Offline scan, after I get that suggestion to remove the quarantined file, the one and only way that file is going to be removed? If so, that needs to be made more obvious to the end user, because in my current version, we're given a suggestion
to remove the offending file, but with NO obvious way to do so...not even the instruction that running Windows Defender Offline is the next step to take to remove it.

I'm also curious why this Trojan keeps appearing in C:\Users\3orch\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\.

Is there a Windows app that is making itself a vector online for this trojan?

Again, thank you for your kind reply. I look forward to additional enlightenment.

Kind Regards,