What to do to remove a threat identified by Windows Security?

When Windows Security (Microsoft Defender) identifies a threat, you have several options to manage it: Quarantine, Clean threat, and Remove. Here’s what each action means:

1. Quarantine: This action isolates the detected threat so that it cannot run or cause harm to your system. The quarantined item is moved to a secure location on your computer, and you can restore it later if you determine it is safe.
2. Clean threat: This option attempts to remove the threat from your system. It typically involves cleaning the infected file by removing the malicious components while leaving the rest of the file intact, if possible.
3. Remove: This action permanently deletes the detected threat from your computer. It is a more definitive action than cleaning, as it does not attempt to salvage any part of the infected file.

You should choose the action based on your assessment of the threat and whether you need to keep any associated files. If you're unsure, starting with quarantine can be a safer option, as it allows you to review the threat without immediate removal.

References:

• Endpoint Protection client frequently asked questions
• Configure remediation for Microsoft Defender Antivirus detections