A warning after reboot does not always mean the same threat returned. Compare the detection name and object path before taking another action.
Verify the result
- Open the latest Scan Log and compare the detection name, path, and cleanup action with the previous result.
- If cleanup requested a restart, allow Windows to restart normally before scanning again.
- Update the Threat List and run the scan appropriate to the original location.
- Quarantine an uncertain object instead of repeatedly deleting it or adding an exclusion.
If the exact object returns
Do not manually delete registry entries or system files. Save both Scan Logs and note the time between cleanup and reappearance. If the path is inside a browser profile, archive, synchronized folder, or removable drive, include that detail because another source may be restoring the object.
Ask Support to isolate persistence
Collect system information and contact Support with the two Scan Logs, exact path, action taken, and restart time. If another antivirus already removed or quarantined the object, report that outcome; do not create an exclusion to force both products to ignore it.