Share via

MSERT "Cleaning your computer"

Anonymous
2024-05-31T10:28:14+00:00

Yesterday I started full scan of my computer. It said that 1428 infected files were found and I chose to let the MSERT do the cleaning. And it's running like forever. Three hours ago it stucked and nothing happens. What am I supposed to do. I don't want to cancel it beacuse I don't want to lose logs. (Scan was running for 26 hours)

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Ramesh 176.3K Reputation points Volunteer Moderator
2024-05-31T12:15:47+00:00

The script ran fine, and everything looks good.

I hope the Defender offline scan log results were OK.

Was this answer helpful?

1 person found this answer helpful.
0 comments

Answer accepted by question author

Ramesh 176.3K Reputation points Volunteer Moderator
2024-05-31T11:55:10+00:00

There is no active malware (except one PUA driver). The following fixlist should remove it.

  • Download fixlist.txt
  • Save Fixlist.txt in the same folder where EnglishFRST64.exe is.
  • Close all program windows.
  • Launch the Farbar Scanner tool and click "Fix".
  • Reboot Windows when prompted.
  • Upload the output log file (FixLog.txt) to your OneDrive.

BTW, the Defender Offline log is stored at "C:\Windows\Microsoft Antimalware\Support\msssWrapper.log". And if it removed any threat, it would show up in the protection history in Windows Security. Ref: https://www.winhelponline.com/blog/start-windows-defender-offline-scan/

Was this answer helpful?

1 person found this answer helpful.
0 comments

10 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ramesh 176.3K Reputation points Volunteer Moderator
    2024-05-31T11:33:49+00:00

    Addition.txt is inaccessible. I get the following error:

    Maybe you can try some other host, like Google Drive or www.filetransfer.io.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-05-31T11:24:47+00:00

    Hi Amra_q,

    It certainly has hung up. Please cancel the scan and run Microsoft Defender Offline instead. MSERT uses the same antivirus definitions as Defender.

    The MSERT log is located at C:\Windows\Debug\msert.log.

    Download the offline installer for the latest security intelligence: https://go.microsoft.com/fwlink/?LinkID=121721&arch=x64

    Double-click to install it. Or drop the .exe file in the C:\ root and start Microsoft Defender Offline.

    Open Windows Security, click Virus and threat protection, and click “Scan options.”

    Click Microsoft Defender Offline, and click Scan now.

    By the way, it runs a quick scan.

    If possible, please also run the Farbar scanner and share the logs. It's a wonderful tool for detecting active malware.

     

    • Download Farbar Recovery Scan Tool (FRST64.exe)
    • Rename FRST64.exe to EnglishFRST64.exe.
    • Run the program. Don't check or uncheck any options. Click "Scan".
    • Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.

     

    (How-To: Share OneDrive files and folders - Microsoft Support)

     

    Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears.

    links:

    Addition.txt

    FRST.txt

    Was this answer helpful?

    0 comments
  3. Ramesh 176.3K Reputation points Volunteer Moderator
    2024-05-31T10:54:03+00:00

    Hi Amra_q,

    It certainly has hung up. Please cancel the scan and run Microsoft Defender Offline instead. MSERT uses the same antivirus definitions as Defender.

    The MSERT log is located at C:\Windows\Debug\msert.log.

    Download the offline installer for the latest security intelligence: https://go.microsoft.com/fwlink/?LinkID=121721&arch=x64

    Double-click to install it. Or drop the .exe file in the C:\ root and start Microsoft Defender Offline.

    Open Windows Security, click Virus and threat protection, and click “Scan options.”

    Click Microsoft Defender Offline, and click Scan now.

    By the way, it runs a quick scan.

    If possible, please also run the Farbar scanner and share the logs. It's a wonderful tool for detecting active malware.

    • Download Farbar Recovery Scan Tool (FRST64.exe)
    • Rename FRST64.exe to EnglishFRST64.exe.
    • Run the program. Don't check or uncheck any options. Click "Scan".
    • Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.

    (How-To: Share OneDrive files and folders - Microsoft Support)

    Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears.

    Was this answer helpful?

    0 comments