Restore quarantined files in Microsoft Defender Antivirus

Applies to:


  • Windows

If Microsoft Defender Antivirus is configured to detect and remediate threats on your device, Microsoft Defender Antivirus quarantines suspicious files. If you are certain a quarantined file is not a threat, you can restore it.

  1. Open Windows Security.
  2. Select Virus & threat protection and then click Protection history.
  3. In the list of all recent items, filter on Quarantined Items.
  4. Select an item you want to keep, and take an action, such as restore.


Restoring a file from quarantine can also be done using Command Prompt. See Restore a file from quarantine.