Security Policy Errors

How to Fix Windows Defender Threat Alerts That Will Not Clear

Tauseeq Magsi Oct 10, 2026 870 views

Question details

The user needs to dismiss persistent low-level USB threat notifications in Windows Defender that remain even after the threat is remediated.

How to Fix Windows Defender Threat Alerts That Will Not Clear

Product: Windows Defender
Device & OS: Windows
Scenario: Attempting to clear the Windows Defender threat history after removing or quarantining a suspicious file on a USB drive.
Observed behavior: Windows Defender continuously displays the same threat alert despite clean subsequent scans, and selecting Quarantine, Remove, or Allow fails to clear the notification.

Before you start

Ensure your computer is temporarily disconnected from the network and safely eject the suspect USB drive before attempting to clear the security cache to prevent any potential malware spread.

Solution 1Recommended

Update Windows Defender and Run a Full System Scan

Ensure your antivirus definitions are fully up-to-date and run a comprehensive scan to rule out active threats before concluding it is a stuck notification.

Often, a persistent alert means the Defender cache is out of sync with the actual system state, or a remnant of the file still exists. Updating definitions and running a full scan can reset this state.

Update Defender Definitions

Open 'Windows Security' from your Start menu, navigate to 'Virus & threat protection', scroll down to 'Virus & threat protection updates', and click 'Check for updates'.

Run a Full Scan

Return to the 'Virus & threat protection' screen, click 'Scan options', select 'Full scan', and click 'Scan now'. Allow the process to complete entirely.

Run a Second-Opinion Scanner

If the alert persists, run a reputable third-party malware scanner to confirm the threat is genuinely gone and that Defender is merely displaying a false positive.

Update Windows Defender and Run a Full System Scan

Solution 2

Clear Stuck Defender Scan History in Safe Mode

Boot into Safe Mode to safely delete the Windows Defender scan history cache, which bypasses the file locks that prevent deletion in normal mode.

Solution 3

Troubleshoot via Elevated PowerShell

Use an administrative PowerShell session to verify Defender's status or trigger commands when the Windows UI is unresponsive.

Free Microsoft Office alternative

Work Securely and Efficiently with WPS Office

While resolving system security alerts, you need a safe, reliable, and lightweight office suite for your daily document tasks. WPS Office provides an excellent, free alternative to Microsoft Office, ensuring your workflow remains uninterrupted.

1. Download the Installer: Visit the official WPS Office website and click the free download button.
2. Install the Software: Run the downloaded executable file and follow the straightforward on-screen instructions.
3. Start Creating: Open WPS Office to instantly view, edit, and save your Word, Excel, and PowerPoint documents.

Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptxLightweight design that won't strain your system resources during deep security scansSafe and secure document handling with built-in cloud backup optionsFree to use with an intuitive, familiar interface for a seamless transition

microsoft office alternative - wps office

Frequently Asked Questions

Why does Windows Defender keep showing the same threat after I clicked Remove?

This frequently occurs when the Windows Defender scan history cache becomes corrupted or stuck. The system continues to read the old log file, falsely warning you about a threat that has already been successfully remediated.

Is it safe to delete the Windows Defender Scans folder?

You should never delete the entire Scans folder. You should only clear the contents of the 'History\Service' subfolder. Attempting to take ownership or delete parent Defender directories can break your antivirus protection and require a system reset.

Can a third-party antivirus help clear these alerts?

While a third-party scanner won't directly clear Defender's history logs, running a reputable second-opinion scanner helps you verify if the threat is genuinely gone. If the second scanner finds nothing, you can confidently treat the Defender alert as a stuck notification and proceed to clear the cache in Safe Mode.

Microsoft Office Security Issues