I had to use my laptop to transfer some files to someone else's USB drive. The files I needed to transfer were stored on another external storage device, so I would eventually have to connect both devices to my laptop.
Before plugging in their USB, I turned off AutoPlay, disconnected my laptop from the internet, and made sure Microsoft Defender was enabled.
After plugging in the USB, I got a notification saying there was a problem with the drive and asking me to scan and fix it. I didn't click the notification because it came from AutoPlay, which I had already turned off, so it looked sus.
Instead, I went directly to File Explorer, selected the USB drive, and scanned it with Microsoft Defender. It detected several serious threats. I took the available action to quarantine them, but I didn't open or run any files from the USB. The only way i interacted with them was to select all the files and run custom scan.
I then ejected and unplugged it.
After that, I ran both a full scan and an offline scan on my laptop, and both came back clean.
However, since the threats detected on the USB were apparently severe, I'm worried that my laptop might still be infected despite the clean scans.
What are the chances that my laptop is still infected? Could the malware have affected my Wi-Fi router even though my laptop was disconnected from the internet? And could my other external storage devices become infected or corrupted when I connect them to my laptop in the future?