The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Start in Windows Security > Protection history. Expand the event that matches the app or file to see what happened and which actions are available. If there is no matching entry, check the Windows feature that fits the symptom: an app warning, a file-save failure, and a network problem can come from different protections—not just Microsoft Defender Antivirus.
Check Protection history first
Open Start, search for Windows Security, open it, and select Protection history. Expand cards that match the time or name of the app or file. Microsoft says this page records actions taken by Microsoft Defender Antivirus and can also show some SmartScreen blocked-app events. Red entries indicate serious items requiring immediate attention; yellow entries indicate items that are not urgent but should be checked. Microsoft’s Protection History guide says events remain in the list for two weeks, and administrator privileges are required to see threat details.
As an Amazon Associate I earn from qualifying purchases.
What the event labels mean
- Threat found – action needed: Defender detected a possible threat and is waiting for a decision. The available choices can include quarantining it or allowing it if you are confident the detection is a false positive.
- Threat quarantined: The item was blocked and isolated. You can remove or restore it; restoring may trigger another detection. If you determine it is safe, a separate allow action may be available.
- Threat blocked: Defender blocked and removed the threat. Allowing it applies to a future occurrence, so you may need to download the file again.
- Remediation incomplete: Defender could not finish cleaning the item. Expand the card and follow the additional steps shown.
- This app has been blocked: SmartScreen may be responsible. Check the warning and the app-control settings below before deciding what to do.
Match the setting to what the app is doing
“Windows Defender blocked it” can refer to several different controls. Use the message on screen and the symptom to choose the relevant place to check.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
A download or app displays a reputation warning
Open Windows Security > App & browser control > Reputation-based protection. Microsoft Defender SmartScreen can warn about or block unsafe apps, files, websites, and downloads. Review the specific alert rather than assuming that a warning means antivirus quarantined the file. See Microsoft’s App & browser control guide.
#1 Best Overall
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Windows 11 shows a Smart App Control warning
Smart App Control is a Windows 11 feature, separate from antivirus quarantine. Microsoft says it uses cloud-powered intelligence and, when it cannot confidently assess an app, checks whether the app has a valid signature. Microsoft currently documents no way to bypass Smart App Control for one individual app; its recommended route is to contact the developer about getting a valid signature. Details are in Microsoft’s Smart App Control FAQ.
The app opens but cannot save to a protected folder
Check Windows Security > Virus & threat protection > Manage ransomware protection > Controlled folder access. This feature can stop an untrusted app from changing files in protected folders; it is not the same as an antivirus detection or quarantine. If Windows displays a blocked-app alert, note the program’s path and use the alert’s option to add an allowed app, then browse to that program. Trying to save to a different location can help establish whether the protected folder is the problem. Allow an app only if you trust it, because doing so gives it access to protected files. Microsoft explains the setting in its Virus & threat protection guide.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
The app cannot connect to a network
Check Windows Security > Firewall & network protection > Allow an app through firewall. The firewall controls network communication, so a connection failure does not by itself show that Defender blocked the app file. Microsoft recommends allowing a needed app through the firewall rather than turning the firewall off, and says allowing an app is generally safer than opening a port. Do not allow an app you do not recognize. An organization may manage these settings and prevent changes. See Microsoft’s guidance on the risks of allowing apps through Firewall and Firewall & network protection.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteScan the file and confirm which antivirus is active
If the file is still on the device, find it in File Explorer, right-click it, and select Scan with Microsoft Defender. On Windows 11, you may first need to select Show more options. To see which security provider is protecting the device, open Windows Security > Virus & threat protection > Manage providers. When a third-party antivirus is installed, Microsoft Defender Antivirus may be disabled automatically; Windows Security’s presence does not prove that Defender Antivirus is the active scanner. Microsoft describes these checks in Stay protected with the Windows Security app.
Rank #3
- WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
- 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
- 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
- CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
- LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
Handle a suspected false positive carefully
Do not allow a file just to make an alert disappear. Microsoft warns that allowing a threat can expose the device and its data if the item is malicious. First verify that the file came from the software publisher’s official source and check that the publisher or signature matches what you expect. If you cannot establish that it is safe, leave it quarantined and ask the publisher or your device administrator for help.
If you have verified the file and believe Defender identified it incorrectly, use the available reporting route described in Microsoft’s guidance on potentially unwanted applications. An allowed threat remains allowed until you remove it from Allowed threats. Avoid disabling real-time protection or creating a broad exclusion as a workaround: an exclusion means Defender Antivirus will not check the selected file, folder, file type, or process during real-time scanning, which can leave the device vulnerable. Microsoft outlines these risks in its Virus & threat protection guidance.
If Protection history has no matching event
A missing entry does not prove that Windows did not block the app. Protection history has a two-week retention window, and Microsoft’s guidance does not claim it records every policy decision or event from third-party security software. The relevant control may also be SmartScreen, Smart App Control, Controlled folder access, or Firewall rather than Defender Antivirus. Check the screen or setting that matches the failure, and bear in mind that labels and layouts can vary between Windows updates. The cited Windows Security guidance covers Windows 10 and Windows 11 in several areas; Smart App Control is Windows 11-only.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
