Restore quarantined files in Microsoft Defender Antivirus

Applies to:


  • Windows

Depending on how Microsoft Defender Antivirus is configured, it quarantines suspicious files. If you're certain a quarantined file isn't a threat, you can restore it on your Windows device.

  1. On your Windows device, open Windows Security.

  2. Select Virus & threat protection and then, under Current threats, select Protection history.

  3. If you have a list of items, you can filter on Quarantined Items.

  4. Select an item you want to keep, and choose an action, such as Restore.


You can also restore a file from quarantine by using Command Prompt. See Restore file from quarantine.

See also


Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.