How do I know which app is quarantined or blocked ?


  1. Mike100
    Posts : 162
    Windows 10 Pro 21H1
       New #1

    How do I know which app is quarantined or blocked ?


    Yesterday I copied some files from my old PC to this one. I received a noticed there were two PUPs. I deleted one.

    Today I copied more files. I went back to look into the second PUP & thought I clicked to see more details but it disappeared.

    The Virus & threat protection now says there is one app quarantined & two apps blocked. But it doesn't says what they are.

    The Microsoft site says to:
    Select Virus & threat protection and then click Protection history.
    In the list of all recent items, filter on Quarantined Items.
    Select an item you want to keep, and take an action, such as restore.

    If I select an item the only action it asks is if I want to allow the app to make changes to your device. Of course I don't because I have no idea what they are. How do I find out what the apps are?
      My Computer
    Quote Quote

  3. steve108
    Posts : 21,421
    19044.1586 - 21H2 Pro x64
       New #2

    How to view malware history in Microsoft Defender Antivirus on Windows 10 | Windows Central you should be able to see history
      My Computer
    Quote Quote

  4. Try3
    Posts : 16,949
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       New #3

    Mike100 said:
    If I select an item the only action it asks is if I want to allow the app to make changes to your device.
    Mike,

    It's asking you if you want to allow the app you are using [Microsoft Defender] to make changes to your device. Clicking on Show more details in the Admin challenge dialog would show you which app is asking.
    It is demanding Admin approval to run the WD module that has the power to restore applications.

    Denis
      My Computer
    Quote Quote

  6. Mike100
    Posts : 162
    Windows 10 Pro 21H1
    Thread Starter
       New #4

    Here's what I have.
    How do I know which app is quarantined or blocked ?-image.png

    If I click on any one of these I get the screen that says “Do you want to allow this app to make changes to your device?”

    If I click on Show more details I get this screen. It shows the same whether it’s the quarantined item or the blocked items. It wouldn’t let me do a screen print so I used my camera.
    How do I know which app is quarantined or blocked ?-image.png

    After I took the photo the following appeared in the Protection history. Apparently it’s delayed in showing up for some reason.
    How do I know which app is quarantined or blocked ?-image.png

    It makes it look like the location of the affected item is already in the RecycleBin but I don’t see it there. I deleted it & still don’t see it in the recycle bin. What am I missing?
      My Computer
    Quote Quote

  7. Try3
    Posts : 16,949
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       New #5

    Mike,

    Yes, I'm sorry. In the case of a WD Admin prompt you have to click on Show information about the publisher's certificate to get confirmation that it is a Windows component that is seeking approval to run.
    How do I know which app is quarantined or blocked ?-show-details-.png

    Denis
      My Computer
    Quote Quote

  8. Try3
    Posts : 16,949
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       New #6

    Mike100 said:
    How do I know which app is quarantined or blocked ?-image.png
    It makes it look like the location of the affected item is already in the RecycleBin but I don’t see it there. I deleted it & still don’t see it in the recycle bin. What am I missing?
    Mike,

    Yes. It was in the Recycle bin and was quarantined from there so you would not see it if you looked in the bin.
    - If you restore it then it will be restored to the bin i.e. it would remain deleted and you would have to restore it from the bin to its original location before you could use it [and the first thing that would happen is that WD would quarantine it from its new location so you'd have to go to WD to restore it again].
    - If you use the Actions button to delete it then it gets deleted from he Recycle bin altogether so you would not see it anywhere.

    WD goes through phases of being overly zealous in identifying items as malicious. I had to mess around several times a few months ago to stop it quarantining innocent scripts of my own. The very next day, it would settle down again so I concluded that it was something in WD malware definition updates that was causing the behaviour. I have worked through WD Exclusions to get things to work.
    Add or Remove Windows Defender Exclusions - TenForumsTutorials

    Denis
      My Computer
    Quote Quote

  9. Mike100
    Posts : 162
    Windows 10 Pro 21H1
    Thread Starter
       New #7

    @Try3
    Thanks for all the information -

    If I click on any of the items & then click YES when asked “Do you want to allow this app to make changes to your device?”, it brings up all the details. Once this function is "activated", clicking on any of the other items displays all their details.

    I've deleted the offending apps which were old & not needed. How do I now get rid of the quarantined & blocked messages?
      My Computer
    Quote Quote

  10. Try3
    Posts : 16,949
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       New #8

    Mike100 said:
    How do I now get rid of the quarantined & blocked messages?
    You don't have to. You can merely not look at Protection history.

    But, if you wanted to, you could try
    How to clear Windows Defender Protection History - TheWindowsClub
    I have not used this procedure myself. The link was posted in another thread last year so I made a note of it.

    All the best,
    Denis
      My Computer
    Quote Quote

  12. Mike100
    Posts : 162
    Windows 10 Pro 21H1
    Thread Starter
       New #9

    Try3 said:
    You don't have to. You can merely not look at Protection history.
    But, if you wanted to, you could try
    How to clear Windows Defender Protection History - TheWindowsClub
    I have not used this procedure myself. The link was posted in another thread last year so I made a note of it.
    All the best,
    Denis
    Thanks again -

    Good point - just don't look at it.
      My Computer
    Quote Quote

 

  Related Discussions
where is the quarantined defender files put?
in AntiVirus, Firewalls and System Security

i needed the drive free of some files , so was copying a folder I wanted, and Defender was objecting. So I added an exception, but maybe it did not take cause the file is nowhere to be found. It says e: which was the usb drive, so put in another...
View details of quarantined items all at once?
in AntiVirus, Firewalls and System Security

I restored an old drive that has many EXE files, which are self-running presentations from old CD-ROM projects of mine, and I'm attempting to copy them over using a third party back up app, however Windows 10 has snagged a whole bunch them all at...
How do I remove quarantined threats
in AntiVirus, Firewalls and System Security

Windows Defender did what it is designed to do - quarantined a Trojan. Now I would like to remove it from quarantine. How do I do that? I know Windows says it will removed periodically, but I do not know how long that may be, so would like to...
Message re. quarantined file keeps appearing!
in AntiVirus, Firewalls and System Security

I use Avast which is very good indeed but over the last 3 days every time I boot up my laptop a message appears in blue box which says 'file found and quarantined' or something like that. I quickly click on the ! in the corner of box but there is no...
How to know what files are quarantined by Windows Defender
in AntiVirus, Firewalls and System Security

Like the first photo, sometimes Windows Defender shows which file it detected and quarantined. In this case, it's fine. 90848 But, sometimes, it doesn't show what files it detected and quarantined, and shows only perhaps "quarantined" files,...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 18:22.
Find Us




Windows 10 Forums