Windows 10: Can't start Powershell Because of Defender's Quarantine

Hi, yesterday I used PowerShell to add exclusion for .exe file type. Then Windows Defender found powershell.exe as virus and blocked me to access to it. I can't press allow because there isn't any allow button. Every time I run PowerShell, it crashed. Any solution? https://i.imgur.com/fGoEsfB.png I can't upload image to answers.microsoft.com

:)

 

Windows Defender is missing Restore Button for Quarantined Threats

It wasn't listed under "Quarantined Threats", but was listed in "See full history" as quarantined. It has been about 2 hours
and now it is listed under "Quarantined Threats" which now shows the Restore or Delete options. Something must be causing
a delay in listing the quarantined file under "Quarantined Threats" after they have been found and quarantined by Defender.

 

windows defender quarantine

Julia,

GreginMich
replied

Redirecting

Nothing has changed. We still have erroneous status reports in the Full history page just like we did in the All detected items page in the classic Defender interface. If a threat doesn't appear in the Quarantined threats list on the Scan history page,
then it wasn't actually quarantined.

So we need to correct the documentation here:

https://www.microsoft.com/en-us/wdsi/help/antimalware-faq

On Windows Defender Antivirus for Windows 10 version 1703 and later:

• Use the Windows search box to find and open the Windows Defender Security Center
• Navigate to the Virus & threat protection > Scan history.
• Under Quarantined threats, select
  See full history

On earlier versions of Windows:

• Open Microsoft Security Essentials or Windows Defender.
• Click the History tab.
• Select Quarantined items and then View details. You might be asked for an admin password or to confirm your choice.

Once you have reviewed the quarantined items you can:

• Select Remove all to delete all quarantined software.
• Select individual files, and then click Remove or
  Restore.

`~`

 

quarantined threats

In the Windows Defender Security Center, the Quarantined Threats list on the Scan History page corresponds to the Quarantined Items page in the classic UI, and that list will display any items that have actually been quarantined,
as well as provide the options to remove or restore any of those items – as we can see in this screenshot:





You can either click on the Remove all button or click on a down arrow in order to display the option buttons for an individual threat. But remember that the recommended action can sometimes be wrong when a harmless file is quarantined
by mistake (a false positive), and that's the reason why threats are quarantined rather than removed automatically. The items in the Quarantine could be safely left there indefinitely; but they'll be automatically removed after 90 days, by default.

The number of days that the item is kept in the Quarantine can be reconfigured with this preference setting:

-QuarantinePurgeItemsAfterDelay

Specifies the number of days to keep items in the Quarantine folder. If you specify a value of zero for this parameter, items stay in the Quarantine folder indefinitely.

Set-MpPreference (Defender)

For example, to have quarantined items automatically removed after just a week, run this command at the Administrator PowerShell prompt:

Set-MpPreference -QuarantinePurgeItemsAfterDelay 7