Win32/Suweezy how is this still a thing with Win?

Defender’s quarantine entries do not mean it allowed the infection; they show detections, but persistent miners and exclusions you cannot remove mean the computer should still be treated as compromised. Disconnect it from networks and do not enter passwords. In Windows Security, review Protection history and remove any allowed threat, then inspect Virus & threat protection > Manage settings > Exclusions. Every exclusion weakens scanning; if they return or remain locked, stop troubleshooting inside the running system. Save work, run Microsoft Defender Offline from Scan options, then run a full scan after Windows restarts. From a clean device, change important passwords and revoke active sessions. Back up only documents, not executables or scripts. If miners, exclusions, or unusual services return, reinstall Windows from known-good media and restore clean data. Reinstall applications only from verified publisher sources. A four-second “full scan” is not reliable evidence that the device is clean.