Windows Defender quarantined files

Florian Zepter 81 Reputation points
2020-09-22T13:59:15.41+00:00

Hi @all ,

when will the quarantined files been deleted automatically?

I know the Registry Keys:
LocalSettingOverridePurgeItemsAfterDelay 1
PurgeItemsAfterDelay 30

As far as i understood all quarantined which are older then 30 days should be deleted.
But when is Windows Defender running the cleanup?

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
0 comments No comments
{count} votes

Accepted answer
  1. Leon Laude 86,031 Reputation points
    2020-09-22T14:22:53.72+00:00

    Hi @Florian Zepter ,

    The Windows Defender cleanup is a scheduled task called Windows Defender Cleanup which can be found in the Task Scheduler (Task Scheduler Library\Microsoft\Windows\Windows Defender), I believe this task is only run if there are any items in the quarantine.

    26414-windowsdefender-cleanup-scheduledtask.png

    If the registry key PurgeItemsAfterDelay has the value of 30, it means that Windows Defender will purge the quarantined items after 30 days.

    ----------

    (If the reply was helpful please don't forget to upvote or accept as answer, thank you)

    Best regards,
    Leon

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Florian Zepter 81 Reputation points
    2020-09-25T09:13:21.907+00:00

    Hi Leon,
    thanks for your answer.
    the problem I am seeing is that the cleanup is not triggered automatically and the quarantined fails are not cleaned up.
    BR
    Florian

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.