Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
Redmond desk4 min

Windows Defender Keeps Popping Up? Find the Alert and Fix It

Repeated Microsoft Defender alerts can mean an unresolved threat, a blocked PUA, incomplete cleanup, or a protection-status notice. Check Protection history to find the cause and take the right action.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When Microsoft Defender keeps popping up, start by checking Windows Security > Protection history. A repeat prompt can mean a threat still needs a decision, a potentially unwanted app is blocked but not removed, cleanup is incomplete, or Windows is reporting a protection setting—not necessarily that every new alert is an active infection.

What a repeated Windows Defender alert can mean

Protection history is the place to identify what Windows Security is reporting. Its entries can include threats awaiting a decision, blocked or quarantined items, incomplete cleanup, potentially unwanted apps (PUAs), and notices that a protection service is off. Microsoft says the history keeps events for two weeks; threat details may require administrator privileges. Microsoft Support: Protection History in the Windows Security App

As an Amazon Associate I earn from qualifying purchases.

  • Threat found — action needed: Defender detected a possible threat and is waiting for you to choose an action.
  • Quarantined or blocked: The item has been prevented from running, but it may not have been removed. You can remove it or restore it; restoring an unsafe file can cause Defender to detect it again.
  • Remediation incomplete: Defender could not finish cleaning the item. Expand the event card and follow its listed next steps.
  • Potentially unwanted app: A PUA is not necessarily malware, but it may cause unexpected advertising, slow performance, or install other software. It can stay blocked until you choose an action and select Start actions.
  • Service or protection status: An entry may report that a service, such as SmartScreen for Edge, is off rather than identify a newly found file.

If an older alert is missing, it may have aged out of the two-week history. On a work or school computer, an administrator may control security settings or need to review threat details.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check the alert and choose the right action

  1. Open Windows Security and select Protection history. Find the newest relevant card, expand it, and read the detection name, status, and available actions.
  2. If the card says an action is needed, select an action appropriate to the item. If you are unsure whether a file is safe, Microsoft advises choosing quarantine rather than allowing it. Allowing an unsafe file can put your data, personal information, or device at risk.
  3. For a PUA, choose an action and select Start actions. Leaving it blocked without completing that step can leave it on the device and lead to further detections.
  4. If cleanup is incomplete, expand the event and follow its specific instructions rather than dismissing the alert.

Microsoft’s guidance on PUAs explains the available blocking settings and action flow: Protect your PC from potentially unwanted applications.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Run scans if unwanted software may still be present

If the alert points to unwanted software or keeps returning after you have handled the event, update Microsoft Defender security intelligence and run a full scan. Uninstall software you do not need. Microsoft also recommends a Defender Offline scan if unwanted software persists; it restarts the computer, so save open work first. After the scan, check Protection history for its results.

  1. In Windows Security, open Virus & threat protection and check for security intelligence updates.
  2. From the scan options, run a Full scan if you suspect unwanted software may be on the device.
  3. Uninstall software you do not recognize or no longer need, using Windows Settings’ installed-apps controls.
  4. If the problem persists, select Microsoft Defender Offline scan from scan options and start it after saving your work. The PC will restart.

For Microsoft’s guidance on unwanted software and scans, see Protect your PC from unwanted software and Virus and Threat Protection in the Windows Security App.

Rank #2
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Turn down optional notifications—not urgent warnings

If Protection history shows no unresolved threat and the pop-up is informational, adjust optional notification settings rather than turning off antivirus protection. In Windows Security, open Settings > Manage notifications to change available notification categories. Windows also lets you manage banners and notification-center display under Settings > System > Notifications. Windows Security continues to show notifications for problems that require immediate action.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

See Microsoft’s instructions for Windows Security App Settings and Notifications and Do Not Disturb in Windows.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Keep protection on and check who manages the device

Do not use turning off real-time protection as the routine way to stop prompts. Files opened or downloaded while it is off will not be scanned during that period. If one trusted file or folder needs an exception, Microsoft identifies an exclusion as a narrower alternative to disabling antivirus protection; use one only when you understand the risk. If a third-party antivirus is installed, Microsoft Defender Antivirus may enter disabled mode automatically and should return to active mode when that product is uninstalled. Check protection providers in Windows Security if Defender’s status—not a detection—is what keeps appearing.

Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

If this is a work or school device and settings are locked, or the alert refers to managed protection, contact your organization’s IT administrator. Microsoft’s guidance on scanning an item with Windows Security covers item scans and related protection behavior.

Best Value
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Rank #4
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-C Type TrustKey T120
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.