Solution – Restore Deleted Quarantined File From Windows Defender

Restore Quarantined File From Windows Defender

Windows Defender, or Windows Security, is Microsoft’s answer to malware. This amazing tool is highly rated for blocking malware from Windows PCs. However, this tool sometimes behaves extra cautiously and quarantines files that appear suspicious but are not malicious. These files are also known as false positives, and although the number is very low, they could be important files you want but cannot use because they have been quarantined. This guide will describe two ways to restore quarantined files from Windows Defender.

Why Does Windows Defender Quarantine False Positives

All antivirus programs, including Windows Defender, do not quarantine non-malicious files. Still, it does happen sometimes due to the following reasons: 

Expired digital signature—If a file has an expired or mismatched digital signature, it can be flagged as suspicious or malicious and quarantined.

Reported Dangerous—If a file has been reported as dangerous by most users, it may be regarded as dangerous for all until the Microsoft team checks it.

Note : To fix bugs, have security patches and the latest virus definitions it is important to keep your Windows updated.

Also Read: Are Windows Defender Security Warning Alerts Fake? – It May be a Virus!

2 Ways to Recover Deleted Quarantined Files

If a file falls under the suspicious category, it is quarantined instead of deleted. This helps the user to restore the file they consider safe.  However, a malicious file cannot be restored. Here are the steps to restore quarantine files from Windows Defender:

Step 1: Press Win + S to open the Search box and type Windows Security.
Step 2: Click on the relevant result under Best Match, and the Windows Security window will open.
Step 3: Click on the Virus and Threat Protection option.

Virus & Threat Protection

Step 4: Next, click on the Protection History link.protection history link

Step 5: Next, click on Filters and choose Quarantined Items.quarantined items in protection history

Step 6: A list of all the files that have been quarantined will appear on the screen. Locate the file you want to restore and click on the dropdown to reveal more options.
Step 7: Choose to Restore, and the file will be removed from the quarantine.

Also Read: Fix – Windows Defender Won’t Update

Bonus Tip: Restore Quarantined Files Using Command Prompt

This method is more technical and difficult than the previous one. But if you cannot retrieve your files from Windows Defender, you can try this one.

Step 1: Press Win + R and type “cmd” in the text box.
Step 2: Press Ctrl + Shift + Enter to open the Command Prompt in an elevated mode.
Step 3: Copy and paste the following command and press the Enter key.

 cd “%ProgramFiles%\Windows Defender”

windows defender command
Step 4: Next, type the next command followed by the Enter key.

MpCmdRun.exe -restore -listall 

Step 5: A list of quarantined files will appear on the screen. Locate the file you want to restore.
Step 6: To restore a file, type the following command:

MpCmdRun.exe -restore -name “Filename”

Step 7: Insert the filename of the file you wish to restore in the quotes and press Enter.

Editor’s Tip: Use T9 Real-time Antivirus Software To Secure Your PC

If you are facing issues using the Windows Defender antivirus application, we recommend using  T9 real-time antivirus software, which we have been using for a long time. This amazing antivirus app scans your PC 24/7 and prevents malware from infecting it. Some other features make T9 antivirus a necessary app for your PC.

T9_Home Screen

Ad Blocker. 

The T9 antivirus contains an ad blocker module that helps users download an extension to block ads while browsing the internet.

PC Optimizer and Shredder.

The PC Optimizer app helps remove junk and temporary files from your computer. The Shredder module is designed to permanently remove personal files and data from your PC in a way that makes them unrecoverable by the most advanced file recovery apps.

Startup Manager. 

This module helps boost your PC’s boot speed by removing unnecessary programs that turn on every time your computer boots up.

Web Protection. 

The T9 antivirus helps create a secured channel and protects incoming and outgoing traffic from your PC.

Firewall Protection.

The T9 antivirus adds an extra layer of protection to your PC.

Have You Restored Quarantined Files From Windows Defender

Windows Defender is an amazing antivirus program, but it does have some issues. It quarantines suspicious files even though they may be clean. Thankfully, you can recover those files and use them again by following any one of the methods listed above. In the comments section below, tell us which files you think were genuine but placed in the Quarantine folder.

Stay protected with Windows Security

Share On :

About The Author

Dheeraj Manghnani
Dheeraj Manghnani

Dheeraj Manghnani likes to read and write about latest technological developments that make life simpler in today's intricate world. He has been fascinated by technology since he got his first computer and is on a never ending quest to know more and share his knowledge with others.

Related Posts

Leave a comment

Your email address will not be published. Required fields are marked *

Seen on

View All