Some Windows 11/10 PC users are reporting the issue whereby Windows Defender repeatedly identifies the same threat even after running a full system antivirus scan and consequently quarantined/removed the malware in question.
Windows Defender repeatedly identifies same threat even after removal
If you’re faced with this issue, you can try our recommended solutions below in no particular order and see if that helps to resolve the issue.
- Clear browser cache
- Run AV scan using third-party tools
- Add Scans History folder to Microsoft Defender exclusion list
- Clear Windows Defender Protection History.
Let’s take a look at the description of the process involved concerning each of the listed solutions.
1] Clear browser cache
If you have had malware infection some time ago on the system, which was removed, but the web browser’s settings still remain unchanged, Windows Defender may be flagging suspicious browser-based behavior this way. In this case, check your browser for potentially dangerous extensions. If you cannot find any suspicious extensions, add-ons, or other browser-based content, try to clear the browser cache.
2] Run AV scan using third-party tools
The error could be the detection is a false positive, meaning that there’s no malware on your computer. Nevertheless, it’s advisable to run an AV scan using any reputable on-demand standalone antivirus software – as well as run a Windows Defender Boot-Time scan as additional measures.
3] Add Scans History folder to Windows Defender Exclusion list
Windows Defender stores logs of the scan results, quarantined items, and removed threats. Consequently, when you perform a full system scan, the tool may be scanning itself and detect its logs as a potential threat. In this case, you can add the scans history folder to the Windows Defender exclusion list – when you have clicked the + Add an exclusion button and selected Folder from the drop-down, copy and paste the directory path below into the Folder bar in the Select Folder window, and hit Enter.
C:\ProgramData\Microsoft\Windows Defender\Scans\History
Click Yes on the UAC prompt.
If this doesn’t fix the issue, try the next solution.
4] Clear Windows Defender Protection History
Similar to the above, but in this case, you can clear the Windows Defender Protection History and see if that helps.
You can delete them by accessing the files here:
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
Hope this helps!
Related read: How to remove Windows Defender Action Needed or Recommended notification that won’t go away.
