Open Windows Security → Virus & threat protection → Protection history, select the detected threat, and choose Actions → Quarantine.
- Open Start, type Windows Security, and open it.
- Select Virus & threat protection.
- Select Protection history.
- Expand the card labeled Threat found – action needed.
- Select Actions, then Quarantine. Approve the administrator prompt if shown; administrator privileges are required to review threat details.
- Check that the card now says Threat quarantined. The file is blocked in a safe location and cannot run. ^1^
If the status instead says:
- Threat blocked: Defender has already blocked and removed it; no further action is required.
- Remediation incomplete: Expand the card and perform the additional action displayed.
- Threat quarantined: Leave it quarantined or select Remove to delete it permanently. Do not select Restore unless the file is known to be safe.
Avoid Allow on device unless the file and its publisher are trusted; allowing it permits the file to run and suppresses future alerts. Quarantine is the safer choice when uncertain. ^2^
References