Windows 10: Windows Defender Quarantined files in System32 after update to 2004

Good day.



I have just updated to Version 2004 and after the last restart I got these error messages:

RunDLL

There was a problem starting winscomrssrv.dll

The specified module cannot be found.
​

and:

RunDLL

There was a problem starting StartupCheckLibrary.dll

The specified module cannot be found.
​

I also noticed that my wallpaper is gone (so the wallpaper is just black now) and I got a notification that Windows Defender took action on some threats. When I opened Windows Defender and I went to Virus & Threat Protection > Protection history I saw that three threats were quarantined.



The first stated:

Detected: Trojan:Win32/Tiggre!plock

Date: 24/07/2020 09:08

Details: This program is dangerous and executes commands from an attacker

Affected items:

file: C:\Windows\System32\StartupCheckLibrary.dll

file: C:\Windows\System32\winscomrssrv.dll
​

The second:

Detected: Trojan:Win32/CoinMiner.C!rfn

Date: 24/07/2020 09:08

Details: This program is dangerous and executes commands from an attacker

Affected items:

file: C:\Windows\System32\winlogui.exe
​

And the third:

Detected: Trojan:Win32/CoinMiner.C!rfn

Date: 24/07/2020 09:08

Details: This program is dangerous and executes commands from an attacker

Affected items:

file: C:\Windows\System32\winlogui.exe
​

After some research, I concluded that I should remove all of them via Windows Defender, and so I did. I then restarted my laptop but I still got the error messages.



Are these important system files that I need to somehow get back, or are these part of a virus that somehow makes Windows automatically hook these DLLs on boot and throw error messages when they're not there?



Edit: I just discovered that there's a Windows.old folder in C:\ and the Date Modified is 24/07/2020 09:07 (one minute before the files were quarantined) (my time zone is GMT +2).

C:\Windows.old\Windows\System32 doesn't contain the files mentioned in the error messages.

submitted by /u/GLIBG10B
[link] [comments]

:)

 

Windows Defender is missing Restore Button for Quarantined Threats

It wasn't listed under "Quarantined Threats", but was listed in "See full history" as quarantined. It has been about 2 hours
and now it is listed under "Quarantined Threats" which now shows the Restore or Delete options. Something must be causing
a delay in listing the quarantined file under "Quarantined Threats" after they have been found and quarantined by Defender.

 

Where are the files that windows defender quarantines?

Where are the files that Windows Defender quarantines? I turned on the computer and Defender said a file was dangerous. I clicked the option to Allow the file but it was quarantined anyway. In Defender I can see that it was quarantined and I clicked Restore
but the file was not restored. So I clicked Allow but it still was not restored and now there is no option for restoring the file. In other words Restore and Allow options do not function which is why I am asking this question. Hide hidden files is disabled
and I am searching with administrator privileges: There is only one folder in C:\Program Files\Windows Defender. And that folder is named en-US and there is nothing in there like a quarantined file. Sorry for posting this other information but this question
has been asked repeatedly elsewhere but doesn't get answered because too many people for some reason suggest things like use the Restore option etc. I am not asking for that. I need this file badly. I'd greatly appreciate it if someone could tell me where
Windows Defender stores files that it quarantines? Thank you.

 

All files on Downloads folder gone after updating windows defender

Hi,

I understand the inconvenience caused to you. We will help you to resolve the issue.

I suggest you to follow the below steps to recover the deleted files in Windows Defender and check if it helps.

• In the search box type as ‘Windows Defender’ and click on it.
• Under the tab ‘History’ select the option ‘Quarantined items’.
• Click on ‘View Details’ and check if any files are available.
• If the files are present then click on the file and click on ‘Restore’.

Please get back to us with an update on this issue, we will be happy to assist you further.

Thank you.