Account Security Problems

How to Remove a Low-Threat Virus Detected by Microsoft Defender

John Wilson Oct 14, 2026 869 views

Question details

The user needs to completely remove a persistent low-threat virus detection that keeps reappearing or remains stuck in Microsoft Defender's quarantine.

How to Remove a Low-Threat Virus Detected by Microsoft Defender

Product: Windows Security
Device & OS: Windows
Scenario: A low-threat virus detection is repeatedly flagged by Microsoft Defender and needs to be permanently resolved.
Observed behavior: Microsoft Defender continuously reports a low-threat detection because the item remains in quarantine, returns after a scan, or is tied to a persistent background process.

Before you start

Ensure your computer is connected to the internet to download the latest threat definitions, and save any open work before initiating an offline scan, as it will restart your device.

Solution 1Recommended

Update Threat Definitions and Run a Full Scan

The primary method to ensure the latest threat signatures are used to identify and neutralize the virus.

Keeping Windows Security up to date is crucial for identifying new threats. Running a full scan ensures no hidden files are missed during the cleanup process.

Update Windows Security

Open Windows Security, navigate to 'Virus & threat protection', and check for the latest protection updates to ensure your threat definitions are current.

Run a Full Scan

Go to 'Scan options' under 'Virus & threat protection', select 'Full scan', and click 'Scan now' to thoroughly check all files and running programs.

Remove from Protection History

Open 'Protection history', locate the detected low-threat item, click on it for details, and select 'Remove' if the option is available.

Update Threat Definitions and Run a Full Scan

Tip: Regularly updating your threat definitions prevents older, persistent adware and potentially unwanted programs from bypassing standard quick scans.

Solution 2

Execute a Microsoft Defender Offline Scan

Use this method if the virus is persistent and keeps returning after a standard full scan.

Solution 3

Review Suspicious Processes in Task Manager

Manually inspect running processes if the virus is associated with a persistent background application.

Free Microsoft Office alternative

Keep Your Documents Secure with WPS Office

While resolving system security alerts, consider switching to WPS Office for your document needs. It offers a secure, lightweight environment that is fully compatible with Microsoft Office formats, ensuring seamless productivity without heavy subscription fees.

1. Download the Installer: Visit the official WPS Office website and click the free download button.
2. Install the Software: Run the downloaded installer file and follow the on-screen instructions to set up WPS Office on your secure system.
3. Start Creating Secure Documents: Open WPS Office to seamlessly view, edit, and protect your Word, Excel, and PowerPoint files.

Built-in document encryption and security features to keep your files safeFully compatible with Microsoft Word, Excel, and PowerPoint formatsLightweight design with minimal system resource usageFamiliar user interface for immediate productivity and seamless migration

microsoft office alternative - wps office

Frequently Asked Questions

Why does Microsoft Defender keep showing the same low-level threat?

This often happens when the detected item remains stuck in quarantine, or a persistent background process continually recreates the malicious file after it has been removed by a previous scan.

What is a Microsoft Defender Offline scan?

It is a specialized scanning tool that runs before the standard Windows operating system loads. This allows it to detect and remove highly persistent malware that might disguise or protect itself while Windows is fully active.

Is a low-threat virus dangerous to my computer?

While not as destructive as high-level threats like ransomware, low-threat items such as adware, tracking cookies, or potentially unwanted programs (PUPs) can still compromise your privacy and degrade system performance over time.

How do I manually delete a quarantined file in Windows Security?

Open Windows Security, navigate to 'Virus & threat protection', click on 'Protection history', select the specific threat from the list, click for more details, and then choose the 'Remove' action.

Microsoft Office Security Issues