Antivirus alerts - what to do

Summary

This guide helps you troubleshoot and resolve: Antivirus alerts - what to do. Follow the steps below to fix the issue.

Common Causes

Understanding Antivirus Alerts

What Are They?

Windows Security (built into Windows 11) protects your computer from viruses and malware. When it finds a threat, it will alert you.

Types of Alerts

• Virus detected – malicious software found
• Threat blocked – dangerous activity was stopped
• Firewall blocked an app – an app tried to access the network
• Suspicious activity – something looks wrong

What To Do When You See an Alert

If It Says “Threat Detected” or “Virus Detected”

1. Do not panic. The alert may have already blocked the threat.
2. Click the alert to view details.
3. Follow the recommended action:
   • Quarantine: isolate the file (recommended).
   • Remove: delete the file completely.
   • Allow: only if you are certain the file is safe.
4. Run a full scan to ensure no further threats remain.

If Windows Deletes a File

• The file was likely malicious.
• Check the Recycle Bin only if you must recover it, but be aware this can re‑introduce the threat.
• In most cases, it is safer to let Windows keep the file removed.

If a Program Is Blocked

• Determine whether the program was attempting to access the internet.
• Confirm if the program was recently installed.
• If the program is trusted, you can allow it through the firewall.

1. Open Settings > Privacy & security > Windows Security.
2. Select Firewall & network protection.
3. Choose Allow an app through firewall and adjust the settings as needed.

Running a Manual Scan

Quick Scan

1. Press Win + I to open Settings, then select Privacy & security.
2. Choose Windows Security > Virus & threat protection.
3. Click Quick scan.

Full Scan

1. Navigate to the same location as for a quick scan.
2. Select Scan options.
3. Choose Full scan and click Scan now.
4. Allow 30–60 minutes for the scan to complete.

If You Think It’s a False Alarm

• Was the file downloaded from the internet?
• Was it attached to an email?
• If you are unsure, search the filename online.
• You can submit the file to Microsoft for analysis.

Common False Positives

• Legitimate programmes that modify system files.
• Cracked software.
• Very old applications.
• Unusual file names.

How to View Quarantined Items

1. Open Windows Security > Virus & threat protection.
2. Click “Protection history”.
3. Review the items that were blocked or quarantined.

Best Practices

• Keep Windows Security turned on.
• Do not install two antivirus programmes simultaneously; they can conflict.
• Keep Windows updated – see How to update Windows.
• Avoid clicking suspicious links in emails.
• Download software only from trusted sources – see How to install approved software.
• If performance slows, refer to Computer running slow.

Installing a Third‑Party Antivirus

Windows Security is sufficient for most users. If you choose to install another antivirus solution, Windows Security will automatically disable its real‑time protection; it cannot be uninstalled.

• Ensure the new antivirus is approved by your organisation.
• After installation, run a full scan with the new product.
• Consider using Windows Defender Offline scan for stubborn or boot‑time threats.

When to Get Professional Help

• You cannot remove a threat.
• Your computer behaves unusually.
• You are unsure whether a file is safe.
• Alerts continue to appear despite following the steps above.

If you need assistance, open a ticket.

Still Having Issues?