Additional Microsoft Defender tools and services that provide security across various platforms and environments
The files infected count shown during an MSERT scan is a preliminary count of files that the scanner suspects and marks for later verification. If the final result says no viruses, spyware, or potentially unwanted software were detected, that means those files were not confirmed as malware at the end of the scan.
So in this case, the 17 files infected message does not mean 17 confirmed infected files remain on the device.
How to interpret the result:
- During the scan, MSERT can flag files as potentially suspicious.
- At the end of the scan, those files are checked against malware definitions.
- If the final report says nothing was detected, the scan completed with no confirmed malware findings.
How to find them:
- There are no confirmed infected files to locate if the final report says nothing was detected.
- MSRT documentation states that when malicious software is removed, the tool can report a cryptographic one-way hash (MD5) of the path and file name of each malicious software file that is removed. In a no-detection result, there is no confirmed malware removal list to review.
If there are still signs of unwanted software, check for these symptoms:
- new toolbars, links, or favorites that were not intentionally added
- browser home page or search settings changing unexpectedly
- pop-up ads
- programs that were not installed intentionally
- slower-than-usual performance
If unwanted software is suspected anyway, these are the supported next steps:
- Open Start > Settings > Apps > Apps & features.
- Look for recently installed or unknown apps.
- Select the app and choose Uninstall.
- Remove suspicious browser add-ons.
- Make sure Microsoft Defender Antivirus is enabled and up to date.
References:
- Microsoft Safety Scanner says it is finding infected files while running but when finished says no viruses or spyware found! - Microsoft Q&A
- MSERT (Microsoft Safety Scanner) Mistake - Microsoft Q&A
- Microsoft safety scanner issue - Microsoft Q&A
- Remove specific prevalent malware with Windows Malicious Software Removal Tool (KB890830)
- How can I tell if my computer is infected with malicious software?
- Unwanted software