Removal of Items

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I just ran Windows defender for the first time. I had about 8 items that it
said were High Risk. So I opted to remove them. It removed 6 of the 8 and
gave me a message that the other 2 couldn't be removed. How do I get rid of
these? They said they are High Risk
 
Hi,

you can try a full scan in safe mode. (Press F8 At bootup)

Regards >*< TOM >*<

Cavtrooper schreef:
 
Thanks Tom, I'll give it a shot
--
Cavtrooper


Tom Emmelot said:
Hi,

you can try a full scan in safe mode. (Press F8 At bootup)

Regards >*< TOM >*<

Cavtrooper schreef:
Click to expand...
 
The likelyhood is that these two are either in a place they can't be removed
from (System Restore storage, for example)--or are contained in an archive
file--zip,arj, cab, etc--which Microsoft presently does not just delete,
since it may contain useful user data as well.

The way to find out is to remember the time of the scan, then go to the
system event log, and look for records with source WINDEFEND, during the
scan, with yellow triangle markers. Open these event records--they will
contain the exact path and filenames involved in the detections.

If in doubt, there's a copy to clipboard button in the eventviewer, and you
can post the two you are having trouble with back to this thread.
 
Bill,

I am having a similar issue as noted in this thread. What is teh "system
event log", where do I access it? I am missing something here, so set me
straight.
 
I'm sure you checked out Help & Support, right?

Go to Start, run, and put in eventvwr.msc, and hit enter.

Highlight the System event log in the left column.

Go to View, choose Filter, and in the Source dropdown control, choose
"windefend"

In the right window, scroll back to the time of the scan, and find the
yellow-triangle marked events which show the details of the detections.

--
 
Back
Top