Recover HDD Data
How to recover files deleted by Windows Defender?

How to recover files deleted by Windows Defender?

Built-in Windows security removed valuable data or quarantined it? Today we will talk about ways to recover deleted data, analyze where moved files go, as well as provide optimal settings for the built-in OS defender.


  1. How do I set up, enable or disable Windows Defender?
  2. How to recover a file from quarantine of built-in “Windows Defender”
  3. How do I set up exceptions for my protection system?
  4. What if the security system has deleted important data?

Windows security system is built-in anti-virus software that allows you to avoid the penetration and spread of malicious programs on your computer

The antivirus in Windows 10 is a powerful enough defender of the system which cannot be broken even by experienced hackers. That is why the most frequent victims of hacking are users who use older versions of operating systems, as well as those who have disabled the antivirus by choosing protection from third parties.

Although effective, Windows built-in protection is not ideal, so some users may find that the antivirus has removed important data, mistaking it for a potential threat. Below we will explain the main ways to recover lost information remotely protected by the OS.

How do I set up, enable or disable Windows Defender?

In the built-in security settings, the user will be able to disable, enable or configure Windows Defender to suit his needs.

Important! We strongly recommend you not to disable the system protection for a long period of time. It should be done only before installing third-party anti-virus software to avoid conflicts between two protection systems.

In order to get to the menu of manual control of the built-in Windows protection it is necessary:

Step 1: Click on “Start” and select “Settings” icon in the window that opens.

Step 2: In the settings menu that opens, go to “Update and Security”

Step 3: In the next window, select “Windows Defender” and click on the button “Open Windows Defender”

Step 4: In the Defender’s Security Center, go to the lower-left corner of the window and click on the gear, and then click on the button “Manage providers”.

Read more:  Recovering Data from Android, Windows Phone and Apple iOS Devices

Step 5: In the menu that opens, click the “Open Application” button.

Step 6: Here you can find the “Virus and threat protection” settings tab. Click the “Manage settings” button.

Step 7: The window that opens has three areas of built-in protection. To altogether disable the Windows Defender just switch all items to the “Off” mode.

How to recover a file from quarantine of built-in “Windows Defender”

“Windows Defender” works in automatic mode, so all suspicious files and data are automatically quarantined.

The protection system works by the principle of comparing suspicious data with information about virus software, which is stored on the Microsoft server. This allows malware to be detected with maximum accuracy, so that files quarantined can be a real threat to the system. We do not recommend that you recover files that you are not sure will harm your computer.

There are two ways to view quarantined files. The first is via the Windows Security Center and the second is via Explorer. The first method provides maximum security and gives a full report on why the file was quarantined.

The second way is unsafe, because the user will be able to interact with the virus executable files, which is surely welcome to infection.

To get into Windows Defender quarantine location through an Explorer, just follow the Explorer path

C:\ProgramData\Microsoft\Windows Defender\Quarantine”

and enable the display of hidden folders and system files.

In order to open the quarantine in the “Security Center” it is necessary:

Step 1: Enter the “Security Center” in the way described above, and then select the item with the shield emblem “Viruses and threats protection”

Step 2: In the window that opens, select the “Protection history”

Step 3: The window that opens shows all the threats that have been placed in the quarantine zone. Suspicious files can be deleted or restored in this window.

How do I set up exceptions for my protection system?

While in the Windows Security Center, you can set exceptions for specific files. The data recorded in the exemptions will not be checked by the built-in security system and can be used as usual.

Read more:  Fix S.M.A.R.T. errors on SSD and hard drives

That’s what it takes:

Step 1: As in the previous paragraph, open the “Viruses and threats protection” box, then in the next window, click on the “Manage Settings” button located under the “Viruses and other threats protection settings” box.

Step 2: In the window that opens, drop to the bottom of the settings and go to “Add or remove exceptions”

Step 3: In this menu, you can select exceptions for files by clicking the “Add an exceptions” button.

What if the security system has deleted important data?

The built-in Windows security system can remove potentially malicious files that may accidentally include personal documents, photos, program files, or any other valuable information. In this case, the best solution is to use specialized software to recover deleted data.

At the moment, the best way to recover information is with Recovery Software utilities.

Depending on the type and type of information you have lost, you can use one of these tools:

  • RS Photo Recovery is a utility for fast restoration of deleted, formatted, or removed by viruses photos and image files.
  • RS Partition Recovery is a utility for complicated recovery of deleted data from formatted media and disks, where their logical structure and file system was changed.
  • RS Word Recovery is a specialized tool for the fast recovery of text data and documents of any type.
  • RS File Recovery and RS File Repair is a complicated recovery of lost and damaged information structure.

To restore information deleted by the Defender, all you need to do is select one of the programs, download and run the utility, perform a deep scan of the system disc, and then restore the necessary files from the quarantine zone on the path:

«C:\ProgramData\Microsoft\Windows Defender\Quarantine»

Leave a comment
Online Chat with Recovery Software