A trojan defender will not remove

Anonymous
2024-12-05T13:27:40+00:00

Windows Defender says I have a Trojan: HTML/Redirector.GPAY!MTB. I have tried several times to remove it via Defender. I ran Malwarebytes and it does not find it. My File Explorer is acting weird. Does not display photos correctly, empty file with no thumbnail, and on the right no details at times. Thought I may try uninstalling Defender and install again. Looking for ideas to try.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Ramesh Srinivasan 89,865 Reputation points Independent Advisor
2024-12-05T14:01:57+00:00

Hi, This is Ramesh.

Due to a bug in Defender, threat notifications for old and remediated threats may appear repeatedly. If the offending file has already been removed, use this batch file to clear the Defender threat history.

https://github.com/LesFerch/ClearDefenderHistory

Restart Windows.

*Alternatively*, boot into Safe mode and delete the following folder:

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\DetectionHistory

Start your PC in safe mode in Windows - Microsoft Support:

https://support.microsoft.com/en-us/windows/sta...

In Safe mode, do this:

Open an admin Command Prompt (CMD.exe instead of PowerShell) in Safe mode.

Run this command exactly as given below:

rd /s /q "C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\DetectionHistory"

If the threat notification continues to occur, please post a screenshot of that dialog.

Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to provide accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as PUPs (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Was this answer helpful?

1 person found this answer helpful.
0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-12-06T02:15:27+00:00

    Thanks much for your help. It was an ordeal to get into safe mode. None of the tips worked that you had. I found where I could go to msconfig and select boot mode and that worked and I went to the link you had and deleted the folder. Windows Defender no longer says I have a trojan. I ran Splybot, SUPERantispyware, and Malwarebytes and none of them detected a Trojan before I deleted that folder. Thanks Windows Defender for all the time wasted due to your bug!

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-12-05T13:50:26+00:00

    Hi did you open an exe file? that could be a reason

    Was this answer helpful?

    0 comments