Home / Guides / Security & Windows Defender

Windows Defender Blocked a File You Trust

Beginner Security & Windows Defender Applies to: Windows 10, Windows 11

A download or app gets quarantined or deleted even though you know it's safe.

Before you start: save any open work and note down what you were doing when the problem started — that context helps if you need to search further or ask for help.
  1. Open Windows Security > Virus & threat protection > Protection history to find the specific detection and confirm what was flagged.
  2. If you're confident the file is safe, click "Actions" next to the detection and choose "Restore" to bring it back.
  3. Add an exclusion so it won't be re-flagged: Windows Security > Virus & threat protection > Manage settings > Add or remove exclusions.
  4. Only add exclusions for files/publishers you genuinely trust — this setting is a common way malware gets a foothold if misused.
  5. If it's a known false positive from a legitimate developer, consider reporting it to Microsoft via the "Submit a sample" option to help fix detection for everyone.
Still not fixed? Send us the details and we'll help you dig further, or browse related guides in Security & Windows Defender.

Frequently Asked Questions

Why did Defender block a file I know is safe?
Antivirus detection isn't perfect — a legitimate program can sometimes trigger a false positive because of how it's packaged or what system-level actions it performs, not because it's actually malicious.
Is it risky to add an exclusion for a blocked file?
Only add an exclusion if you're confident the specific file is genuinely safe — ideally from a source you trust. An exclusion tells Defender to stop checking that file entirely, so it should be used selectively, not as a general habit.

Related guides

Windows Defender Won't Turn On (Real-Time Protection Disabled)

Real-time protection shows off, greyed out, or missing entirely — and won't re-enable no matter how many times you toggle it.

Intermediate

Locked Out of Your Windows Account

Wrong password too many times, or a forgotten PIN/password entirely.

Intermediate