Additional Microsoft Defender tools and services that provide security across various platforms and environments
This notification means Microsoft Defender is continuously detecting active Trojan malware (Trojan:Win32/JScealTaskExec.*). The detections keep reappearing because something on the device is still running or reinstalling the malware.
Follow these steps in order:
- Disconnect from the internet
Temporarily turn off Wi‑Fi or unplug the network cable so the malware cannot communicate or download more components. - Run a full Microsoft Defender scan in Safe Mode
- Restart the device into Safe Mode with networking disabled.
- Open Windows Security → Virus & threat protection.
- Under Current threats, choose Scan options → Full scan and run it.
- When the scan finishes, choose Start actions so Defender quarantines or removes everything it finds.
- Check that threats are removed, not just blocked
In Virus & threat protection → Protection history, confirm each Trojan:Win32/JScealTaskExec.* entry shows as Quarantined or Removed. If any are still Active, select them and apply the recommended action. - Remove any suspicious apps or browser extensions
- Go to Settings → Apps → Installed apps and uninstall any software that was installed just before the alerts started or that is unknown/untrusted.
- In each browser, remove unknown extensions and reset the browser settings.
- Create a new scan after reboot
Reboot normally (still with internet off), open Windows Security, and run another Full scan. If no new threats appear, reconnect to the internet and keep monitoring Protection history for a while. - If detections keep coming back
If Defender still reports new active Trojan:Win32/JScealTaskExec.* items after all scans and app cleanup, perform a Reset this PC with Remove everything to get a completely clean Windows installation. Before doing this, copy important personal files to an external drive or cloud storage.
Because this is an active Trojan infection, avoid using the device for banking, shopping, or other sensitive activities until scans are clean or Windows has been fully reset.
References: