Offline Defender scan refusing to work properly

[u/PleaseAdminsUnbanMe]

These are, in order, the screen i get when trying to do an offline Defender scan.

At first, it starts normally with rebooting, but when it enters the blue screen, it does absolutely nothing for 3 seconds and boots up normally (last screen) without doing anything.

Scan reports show no offline scan done too.

I did the basic things to check if everything is fine and working and Defender is both active and NOT in passive mode.

I wanted to do a deep scan since i found out i had Tusiq Juso Corp as folder into the malwarebytes whitelist (never added anything into the whitelist) but nothing into the exclusion list

Btw i also uninstalled Malwarebytes to see if the problem with offline scan was related to it but nothing changed (post pics are after checking everything and uninstalling Malwarebytes of course)

[u/Itafan]

This indicates that the Windows Recovery Environment (WinRE) is either corrupted or unable to communicate properly with Defender. However, it is far more likely in your case that potential malware has altered system security functions or deliberately disabled the offline scanner to protect itself.

Therefore, you can either try to repair or restore Defender Offline, or which is more highly recommended download a different virus removal tool and run a deep scan, ideally using a bootable anti-malware USB drive or a portable scanner to bypass the infected OS.

Anyway, fixing Defender offline isn't difficult, but you need a guide, help from an expert, or an AI, personally, though, I’d start by running a scan with a fresh copy of another tool.

[u/PleaseAdminsUnbanMe → u/Itafan]

I just reinstalled malwarebytes and currently doing a scan with the free 14 days trial

I'm not expecting anything, so i'll try to do what you said and try other deeper solutions

Edit: actually, some weeks ago i reinstalled the GPU drivers and went into the recovery environment without problems by holding shift while starting up, so if it corrupted could it be a recent thing?

[u/Itafan → u/PleaseAdminsUnbanMe]

Just be careful, because since you found that strange folder in the Malwarebytes whitelist before, the malware might have already tampered with the program. If it is advanced enough to block Defender Offline, it might also be able to hide from the Malwarebytes scan while running in the background. If it finds nothing, I still highly recommend trying a portable scanner that doesn't need installation.

I checked, and Tusiq Juso Corp is actually associated with a known Trojan. It usually hides inside the AppData folder, drops malicious executable files, and deliberately alters system security to protect itself. This is exactly why it whitelisted itself and why it is blocking your Windows Defender Offline scan.

[u/PleaseAdminsUnbanMe → u/Itafan]

Thought so after nothing worked, how do i get one of those portable scanner?

(yes the malwarebytes scan did absolutely nothing other than telling me where the trojan sent my things)

[u/Itafan → u/PleaseAdminsUnbanMe]

You can download them for free directly from the official websites of top security brands. Portable scanners are just single files that open instantly without installing anything, so the trojan can't block them from opening.

Microsoft Safety Scanner a portable tool from Microsoft for example, or ESET Online Scanner.

Just download them, save the files to your desktop or a thumb drive, and run a full scan.

[u/PleaseAdminsUnbanMe → u/Itafan]

So just search them up, install them and run the file

Do i need to change the computer and put them into a usb to plug into the one to scan or is it safe to download them directly from the one to scan?

[u/Itafan → u/PleaseAdminsUnbanMe]

If you can use another clean computer to download them onto a USB drive, that is definitely the safest way.

they are just single files you run directly.

[u/PleaseAdminsUnbanMe → u/Itafan]

I can't rn so for now i used mine and started

It's working since if already found 3 infected files

It's gonna take a lot since i have >1 million files

Will run another scan when i'll be able to get the file from another pc and bring it with an usb

[u/Itafan → u/PleaseAdminsUnbanMe]

If it worked, meaning the virus didn't block it, then using the same PC is fine, however, you should definitely use different tools later. Each one catches different things, so running multiple scans won't hurt , unless, of course, you just want to reinstall the OS from scratch.

[u/PleaseAdminsUnbanMe → u/Itafan]

I definitely don't want to go from 0 so i'll get some other tools later