Share via

Windows defender offline not finishing. Is the Trojan removed?

Anonymous
2020-07-07T21:20:26+00:00

So over the weekend, I scanned my computer and it came back saying there was a Trojan:Win32/Vigorf.A on my computer (honestly that in and of itself is odd, as I hadn’t downloaded anything suspicious since the last scan. Two PDFs and I knew the sources of both. I’ve also scanned the PDFs and they came back clean). I allowed Windows Defender to clean the malware off, and it currently says that the threat was blocked, status removed. My computer is working well, but I also tried to run a Windows Defender Offline just to make sure that everything was clean. The offline scan went to 91%, paused, and then the computer restarted. Does that mean that the Trojan is still hidden in the software somewhere keeping the program from finishing? Or is this normal?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2020-07-07T22:15:04+00:00

Hi Alex,

It is not unusual for Windows Defender Offline to complete its scan, before the progress

bar reaches 100%. All PCs function in this same manner.

If you are of a mind too:

You can verify that WDO functioned properly, by examining the MsssWrapper.log in

C:\Windows\Microsoft Antimalware\Support. However, it is a very large log, and to

locate the log of interest, you must know the start "time" of your WDO scan.

Scroll to that "Time" in the log and find "Start" in the left column. This will be the log

regarding the WDO run in which you are interested. The log is very detailed, and most

of it you will not be of interest to you. However, if you scroll down through it, you will

eventually see the status of the completion of the scan.   0x0 indicates a successful

completion of the scan. As it is expressed, a little further in the log.

Happy hunting,  Glen

Was this answer helpful?

10 people found this answer helpful.
0 comments

11 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ferdinand Nanalig 30,145 Reputation points Independent Advisor
    2020-07-07T21:24:36+00:00

    Hi there AlexM.in, I will be your Independent Advisor for today, I hope we can both resolve your problem.

    To make sure that your PC is free from that Trojan virus please follow the steps below.

    Lets start by downloading the free version of Malwarebytes, it is a freeware that you can use to scan, detect and delete viruses like the one you currently have.

    You can download the free version from this link

    https://www.malwarebytes.com/

    Once installed please make a full scan. You may remove this software once you are done with it.

    And follow these additional steps.

    To get rid of it we need to check first where the file is located most likely it is hiding in one of your folders.

    If it pops up do not close it instead open up the Task Manager, click on more details below then look for the open process associated with the pop up, if you cant see it in the process tab go to the details tab and look for that process then if you see right click it and then go to file location and then once you have located the file delete it.

    Remove temp files and unwanted addons in internet explorer.

    Go to start type in Internet options, Under General, Browsing History click Delete, Tick the box for Temporary file, History and Cookies then click delete. Go to the Programs Tab then click on manage add-ons, look for any unusual addin there then remove it.

    Uninstall an unwanted application in Programs and features,

    Go to start type in Control Panel, then go to Programs and then programs and features then go to the list of the programs look for anything unusual or any application that you are not aware right click then uninstall.

    Delete Temporary files off Windows 10.

    Tap Windows Key then R on your keyboard, on the Run box type in %temp% then press enter.

    Once it is up highlight all then delete, if there is a file open that cant be deleted just skip it.

    Hope this helps.

    URL Disclaimer please read.

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  2. Anonymous
    2020-07-07T21:45:14+00:00

    Hello, and thank you for your quick response!

    Nothing has popped up, and there doesnt seem to be any odd programs running in Task Manager.

    I followed your instructions; none of the programs or anything looked unusual.

    i could not figure out how to get the runbox up? When i hit enter, it went to microsoft edge and did a search instead.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Ferdinand Nanalig 30,145 Reputation points Independent Advisor
    2020-07-07T21:52:59+00:00

    Yes, if you cannot remove those files, just skip them.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2020-07-07T21:50:29+00:00

    Nevermind, i was able to figure out runbox. A few files came up saying i would need administrator access to delete. Are those the ones you were saying to skip?

    Was this answer helpful?

    0 comments