MS Safety-Scanner reported one infected file (in a Quick Scan) during scan.

Harry Findley 30 Reputation points
2025-11-28T16:15:17.43+00:00

MS-Safety-Scanner reported one infected file during Quick Scan. However, when scan completed, the report was "no infected files identified". Very confusing...I'd like to know what infected file was initially found and what was done!

Microsoft 365 and Office | Microsoft 365 Defender | For home | Windows
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Q&A Assist
    2025-11-28T16:15:25.41+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    It seems that you encountered a discrepancy between the initial report of an infected file during the Quick Scan and the final report stating that no infected files were identified. This situation can occur due to several reasons:

    1. False Positives: Sometimes, the scanner may initially flag a file as infected due to heuristic analysis or signature detection, but further analysis may determine that the file is safe.
    2. Quarantine and Remediation: If the file was identified as infected, it might have been automatically quarantined or removed during the scan process, leading to the final report showing no infected files.
    3. Scan Completion: The Quick Scan may have detected a potential threat, but by the time the scan completed, the threat could have been resolved or deemed non-threatening.

    To find out more about the specific file that was initially flagged, you may need to check the logs or reports generated by the Microsoft Safety Scanner or any other antivirus software you are using. Unfortunately, the context provided does not specify how to retrieve this information directly from the scanner's output.

    If you continue to experience confusion or issues, consider running a full system scan with Microsoft Defender or another trusted antivirus solution to ensure your system is secure.


    References:

    0 comments No comments

  2. JANSHER L 8,535 Reputation points Independent Advisor
    2025-11-28T16:54:18.5233333+00:00

    Hi Harry,

    Thank you for posting, I am here to help. This behavior of the Microsoft Safety Scanner is actually completely normal.

    During the scan all potential/suspicious one that has been detected

    All files that scanned by Microsoft Defender is consider potential and suspicious.

    This is where the Microsoft Defender scanner will perform a MAPS (Microsoft Active Protection Service). Request to connect to the cloud server, and to upload these initial findings for confirmation. This is why you received a different total number. If it came back with nothing, it means the scan went through finding no threats.

    I hope you find this information helpful. Please let us know if you have any further questions If the answer is helpful, please click "Accept Answer".

    Best regards,

    Jansher

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.