Hello Nel,
So--the way to dig into this:
Windows Defender records, in the System event log, at the time of the scan,
the precise path and filename of each detection.
So--right click My Computer, choose Manage.
Click on the plus sign in front of Event Viewer.
Click on the System events log, in the left column.
Click on View (top menu), filter.
Click the down-arrow at the right of Event Source, and choose "WinDefend."
Click apply, click OK.
Now--in the right window, scroll back to the time of the original detection,
and look for yellow-triangle marked records for those original detections.
Double-click a record in the right window to open it and see the full
detail. You can cut and paste, via a button--back to this thread.
Some possibilities are that the items detected are in the System Restore
storage area, an antivirus Quarantine, or, perhaps, is an archive file of
some sort, which might contain valid data in addition to the spyware
involved.
To delete all but the last System Restore point.
Open Disk Cleanup via Start, Programs, Accessories, System Tººls.
It will scan the system first. Click the More Options tªb.
Now click the Clean up button under System Restºre.
This will remove all but the most recent restore pºint.
For the benefit of the community reading this post, please rate the pºst.
I hope this post is helpful.
Let us know how it works ºut.
Еиçеl
