Have Windows Defender moved your safe, trusted files to the quarantine thinking that it is a virus? Here is how to get them back.
Newer versions of Windows Defender moves files it considers suspicious to the quarantine without user confirmation. In my case, it sent some macro files which I wrote many years ago to the quarantine. If you are convinced that the files in question are safe, you can restore them from the quarantine.
- Launch Windows Defender Security Center
- Virus & threat protection
- Protection History
- In the Protection History section, click on the file
- Hopefully, you will see an action drop down list.
- Choose the restore option.
Here is a full video of the restore process.
Sometimes it doesn’t work
Unfortunately, the restore option might be missing when you click on the file or the quarantined threat as Windows Defender puts it. When I was testing various Windows Defender settings using an EICAR test file, I came across this and many other similar quirks in the Defender GUI. The good news is that these issues always got resolved on their own, either after a lapse of time or after a Windows restart. That at least has been my experience, hopefully, it will work for you as well.