[Solved] Windows Defender Keeps Flagging The Same File Did Not Remove

If Windows Defender kept flagging the same file did not remove, your browser extensions could be at fault and you should remove it. Besides that, you can delete Windows Defender history, add an exception in Windows Defender and so on. You don’t know how to carry out the solutions on your own and could use some help? In that case, this article is exactly what you need.


Reports have indicated an increase in Windows Defender’s sensitivity after the introduction of Windows Defender Advanced Threat Protection (ATP) software. Utilizing machine-learning models, behavior-based detection algorithms and heuristics, ATP quickly analyzes then neutralizes suspicious items.  However, ATP also led to issues such as false alarms, repeated flagging of the same threats, …

Browser Extensions

If you notice Windows Defender flagging the same files time and again, give browser extensions some thought. For your information, if Windows Defender flags files created by browser extensions, removing the files alone won’t solve the problem. The files would come back as long as extensions remain and trigger warnings.

Windows Defender History Logs

On occasions, the history logs of Windows Defender could be responsible for Windows Defender kept flagging the same file did not remove. For your information, the Windows Defender cache stores scan results, quarantined items, removed threats and so on. Thus, if you perform a full system scan, Windows Defender may end up scanning its own logs and issuing warnings.


Solution 1: Remove Browser Extensions

In the beginning, it’s a good idea to look through your browser then get rid of suspicious ones. The process varies from browser to browser but it’s linear in most of the cases. Here, we will show you how to remove extensions on Google Chrome, Mozilla Firefox and Microsoft Edge.

  • Google Chrome
      • Step 1: Open Chrome, click the three-dot icon on the top right and pick Settings.
      • Step 2: Look to the left, locate Extensions and hit it.
      • Step 3: Remove suspicious browser extensions, clear browsing data and restart the browser.
  • Mozilla Firefox
      • Step 1: Open Firefox.
      • Step 2: Press Ctrl + Shift + A to open Add-ons Manager.
      • Step 3: Hit the three-dot icon, remove suspicious browser extensions and clear history.
  • Microsoft Edge
      • Step 1: Open Microsoft Edge, hit the three horizontal dots on the top right, select Extensions and choose Manage Extensions.
      • Step 2: Remove suspicious browser extensions.
      • Step 3: Clear browsing data, restart the browser and see how things turn out.

Solution 2: Delete Windows Defender History Logs

If you suspect the issue is caused by Windows Defender scanning its own logs, all you have to do is to delete it. By doing so, you could effectively and efficiently remove false alerts. It’s noteworthy that scan results, quarantined items, removed threats and so on should be of little value to the average user so there is no need to worry.

  • Step 1: Press Windows + E to open File Explorer.
  • Step 2: Copy and paste C:\ProgramData\Microsoft\Windows Defender\Scans\History into the address bar then press Enter.
  • Step 3: Right-click Services folder and then pick Delete.
  • Step 4: Press Windows + I to open Settings, select Update & Security and choose Windows Security.
  • Step 5: In Virus & Threat Protection, hit Manage settings, toggle the switch to off and toggle it on again.

Solution 3: Add An Exception In Windows Defender

If you have a hard time deleting the logs, you should add an exception for Windows Defender’s History folder. That is going to prevent Windows Defender from scanning itself.

  • Step 1: Press Windows + I to open Settings, select Update & Security and choose Windows Security.
  • Step 2: In Virus & Threat Protection, click Manage settings and pick Exclusions.
  • Step 3: Hit Add or remove exclusions > Add an exclusion > Folder.
  • Step 4: Make an exception for C:\ProgramData\Microsoft\Windows Defender\Scans\History.
  • Step 5: Restart your computer.


Leave a Comment