How to recover files deleted by Windows Defender

Any modern computer must have reliable protection against external threats: viruses, worms, spyware attacks, malicious scripts, etc. To solve this problem, there are many programs, including those built into the operating system by default. For example, if you decide to install Windows 10, you will have access to Defender, a special module for protecting the OS from malware and attacks. The program is able to block the action of spyware modules, delete dangerous files, and also place them in a special area - quarantine. But, as with any other antivirus and security software, it happens that files end up in this area by mistake. Therefore, the question arises: where is Windows 10 Defender Quarantine located and how to remove files from there?

How to configure, enable or disable built-in protection?

In the built-in protection settings, the user will be able to disable , enable , or configure Windows Defender to suit their needs.

Important! We strongly do not recommend disabling system protection for a long period. This should only be done before installing third-party antivirus programs to avoid conflicts between the two protection systems.

To get to the manual control menu for built-in Windows protection, you must:

Step 1. Right- on “Start” and in the window that opens, select “Settings” .

Step 2. In the settings menu that opens, go to “Update and Security” .

Step 3. In the next window, select “Windows Security” and click on the button “Open the Windows Defender Security service” .

Step 4. In the Defender Security Center, go to the lower left corner of the window and click on the gear, then click on the “Manage Vendors” .

How to recover a deleted or blocked file by Defender in Windows 10

Publication:

18 August 2020
Updated:
28 October 2020

Probably many are familiar with the situation of a false positive of an antivirus, when, when connecting a portable hard drive or flash drive, Windows Defender simply deleted an important file that cannot be taken and downloaded on the Internet.

Windows Defender actively blocks threats. It is not limited to scanning executable files or scripts. It will scan all types of files, including archives, images, documents, spreadsheets and more. The antivirus doesn't actually ask users if they want to scan a specific file or directory. Every time new files appear, it will scan them and automatically remove anything it deems malicious. The only problem is that these are often false positives and the user loses safe files.

How to recover a file from the built-in Windows Defender quarantine

Windows Defender works in automatic mode, so all suspicious files and data are automatically quarantined .

The protection system works on the principle of comparing suspicious data with information about virus software that is stored on the Microsoft server. This allows you to detect malware with maximum accuracy, so quarantined files can pose a real threat to the system . We do not recommend restoring files that you are not sure will harm your computer.

There are two ways to view quarantined files. The first is through Windows Security Center , the second is through Explorer . The first method provides maximum security and gives a full report of why the file was quarantined.

The second method is unsafe , since the user will be able to interact with the executable files of the virus, which will certainly lead to infection.

To get into quarantine through Explorer, just follow the Explorer path “C:\ProgramData\Microsoft\Windows Defender\Quarantine” and enable the display of hidden folders and system files .

In order to open quarantine in the Security Center, you must:

Step 1. Go to the “Security Center” in the manner described above, and then select the item with the shield logo “Protection against viruses and threats” .

Step 2. In the window that opens, select the item “Threat Log” .

Step 3. In the window that opens, you can see all the threats that have been placed in the quarantine zone. Suspicious files can be deleted or restored in this window.

Why is data quarantined?

As a rule, this area serves to remove infected or dangerous files to a special area where they are blocked and do not have access to data important to the system. If a virus or worm gets onto your computer, Defender will work and place it in this zone. But sometimes this happens by mistake. For example, this could be a program file that you wrote yourself. Since it does not have security certificates, Defender considered it a threat and deleted it. Or it could be utilities that make changes to the system data, but do not harm it. And Defender, having detected access to the OS, prevents this.

In any case, something similar can happen, so you need to understand how to find quarantine in Windows 10 Defender in order to remove files from there.

What to do if Windows Defender deleted important data?

The built-in protection system does not always work correctly and can periodically delete important files , perceiving them as a security threat. This can be data both on the system disk or desktop, and on other local drives. Unfortunately, it is impossible to predict the inappropriate behavior of Windows Defender, so it is important to know how to recover a deleted file so as not to lose data permanently .

As soon as you notice data loss , immediately download and install the RS Partition Recovery .

RS Partition Recovery program

One-stop data recovery solution

The program has an intuitive interface, which makes it stand out among its competitors. In addition, RS Partition Recovery supports ALL modern file systems , so you can recover data deleted by Windows Defender from home servers and from disks that were used in other operating systems.

An important feature is the deep disk scanning mode , which allows you to recover data lost even several months ago , since users do not always immediately determine the loss of information.

You will have the option to save the recovered file to your hard drive , flash drive , ZIP archive , or upload it to an FTP server . The main thing is that the selected location differs from the disk on which the file was originally stored.

What is quarantine and how do files get there?

First of all, we need to understand this definition. It refers to a separate area on the hard drive where malicious files are placed. Quarantine is needed to block the operation of files and prevent them from gaining access to system data. That is, he is sort of isolated in this area. But it is not deleted. The user can perform various manipulations with it through the antivirus:

  • Rescan;
  • Try to cure;
  • Remove completely.

As a rule, files are quarantined during manual or automatic scanning of hard drives when the antivirus detects suspicious activity. But it happens that files get there by mistake. For example:

  • You downloaded an archive with some documents, and the program considered it malicious;
  • You launched an exe file of a program that was written by you (or another person) manually and does not have security certificates;
  • You use crack files to crack programs and games. They make changes to software data, which can be considered an attack (even if the files are harmless to the system).

And if the data got into the area by mistake, then you need to understand where the quarantine is located in Windows 10 Defender and how to get files from there.

Comments (25)

Advertising block

Subscribe to our newsletter

Navigation

Tag Cloud

Archive of articles

Now we are discussing

debryansk32

Both flash drives recorded in Ventoy do not load into the Vot menu, the system just loads and that’s it before

admin

This section contains descriptions of all known anti-virus scanners:

Roberto

admin, please name other good anti-virus scanners, because besides Dr.Web CureIt there are probably

Anton Pavlovsky

You can download a simple program called Flash Drive Information Extractor. She will show the model

admin

AIDA64 will show the standard of the flash drive. You can measure the speed with DiskMark, and you’ll understand everything based on the results.

About the project RemontCompa.ru

RemontCompa is a site with a huge database of materials on working with a computer and the Windows operating system. Our project was created in 2010, we stood at the origins of the modern history of Windows. On our website you will find materials on working with Windows starting from XP. We keep our finger on the pulse of events in the evolution of Windows and talk about all the important moments in the life of the operating system. We consistently release manuals for working with Windows, sharing tips and secrets. We also contain a lot of materials on computer hardware. And we regularly publish materials about PC configurations so that everyone can build their own ideal computer.

Our site is a great find for those who want to thoroughly understand the computer and Windows and increase their user level to an experienced or pro.

Source

How to enable Windows Defender 10 if there are problems with the antivirus

In some cases, when using a third-party antivirus, it happens that Windows Defender does not automatically turn off and in this case the user resorts to various methods of forcibly disabling the built-in antivirus.

In this article, we will step by step analyze all the ways to solve problems with Windows Defender 10 restarting.

So, if you are faced with the fact that Defender does not turn on automatically and in Windows 10 Settings it reports that it has been disabled by the system administrator, then you should follow the recommendations listed below.

Content

System infection as a reason for the inability to start Windows Defender 10

The malware can block Windows Defender from turning on in various ways. First of all, the malicious program must be removed. To do this, scan the system with an anti-virus scanner; it is worth scanning even with two different scanners. I advise you to select a scanner from the Recommended scanners on the page: Antivirus scanners.

For better performance of scanners, I recommend scanning in Safe System Boot Mode.

After the threat has been eliminated, the user may experience that due to the consequences of the malware, Windows Defender still does not start. To solve it, we move on to the next stage of recommendations.

Windows 10 system file corruption as Windows Defender startup problem

Malware or a bug in another program can compromise the integrity of Windows 10 system files. This can also affect the operation of Windows Defender.

Where is the Avast quarantine folder?

Open avast

and click on the “Protection” section, and in it select the “Antivirus” subsection.
2. In the next window you will see the “ quarantine
” subsection.
After clicking this, you will be shown a list of files located in this storage, where you can now restore the file and add it to the Avast
.

Interesting materials:

Where is the new Hyundai Tussan assembled? Where is the new Santa Fe assembled? Where is Pajero 4 assembled for Russia? Where is Prado 2022 assembled? Where are Prados assembled for Russia? Where is Rapid assembled for Russia? Where is rav4 assembled for Russia? Where is Renault Sandero assembled for Ukraine? Where is Santa Fe collected for Russia? Where is Santa Fe collected?

Rating
( 1 rating, average 4 out of 5 )
Did you like the article? Share with friends:
For any suggestions regarding the site: [email protected]
Для любых предложений по сайту: [email protected]