OK, it seems that malware has set a large number of exclusions.
- Run Windows Powershell as adminstrator.
- Select all the code below then press Ctrl + C to copy it
- Paste it into Powershell and press enter $Exts = (Get-MpPreference).ExclusionExtension Foreach ($Ext in $Exts){ Remove-MpPreference -ExclusionExtension $Ext -EA SilentlyContinue }; $Paths = (Get-MpPreference).ExclusionPath Foreach ($Path in $Paths){ Remove-MpPreference -ExclusionPath $Path -EA SilentlyContinue }; $Procs = (Get-MpPreference).ExclusionProcess Foreach ($Proc in $Procs){ Remove-MpPreference -ExclusionProcess $Proc -EA SilentlyContinue };
Then run the previous command to see if the exclusions have been removed:
Get-MpPreference | fl ExclusionExtension, ExclusionPath, ExclusionProcess, ThreatIDDefaultAction_Ids, ThreatIDDefaultAction_Actions
If the exclusions are cleared, try running a scan.