Windows Defender found "Trojan:Script/Oneeva.A!ml" and said it couldn't fully remediate it but then I deleted the location of the file. Is it gone?

Ostost 1 Reputation point
2022-04-06T15:04:58.533+00:00

I used Microsoft Safety Scanner to do a full scan and in the end it said that there were no issues with my PC. Does that mean the "Trojan:Script/Oneeva.A!ml" has been removed and my PC is no longer infected? I read somewhere that Defender sometimes says it hasn't fully remediated a trojan but actually has and that if the Safety Scanner doesn't detect anything, then it's a false positive. So since it didn't detect anything, was the "Trojan:Script/Oneeva.A!ml" removed? I read somewhere else that Defender cannot remove such viruses and that a different software is needed. I'm really worried and confused about these contradictory sources of information. But considering everything that has happened:

  • Defender detects Trojan:Script/Oneeva.A!ml and flags it as a severe threat and says it hasn't fully remediated it.
  • I go to the location of the files and delete everything.
  • I use Safety Scanner with a full scan to check for malware and it doesn't detect anything.

Does this mean the "Trojan:Script/Oneeva.A!ml" was removed?

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Reza-Ameri 17,341 Reputation points Volunteer Moderator
    2022-04-06T17:32:52.013+00:00

    Normally Microsoft Defender is able to remove the malware and you may run a full scan with it.
    In case you update the Microsoft Defender and run a full scan with it and it won't detect anything, then it already been removed.
    Same for the Safety Scanner and let it do complete the full scan and in case it didn't detect anything, you don't have any malware.
    You may run scan with Microsoft Defender Offline too, have a look at:
    https://support.microsoft.com/en-us/windows/help-protect-my-pc-with-microsoft-defender-offline-9306d528-64bf-4668-5b80-ff533f183d6c
    Then you may check the History in the Microsoft Defender and see status of your malware and whether they have been removed or quarantine.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.