Unable to clear protection history in Windows Defender

jccruz · May 16, 2022

Trying to clear the Windows Defender protection history, with no success:

1) C:\ProgramData\Microsoft\WindowsDefender\Scans\History\Service (deleting this folder "service", then turnning off and on protection in real time & cloud protection.), reboot windows.

2) Clearing the log through "event viewer."

3) Switching to 1 day the rule "Turn on removal of items from scan history folder" in gpedit.msc

4) In a privileged PowerShell running the command "Set-MpPreference -ScanPurgeItemsAfterDelay 1"

Im always getting the log populated as the image attached.

Any ideas?!?

Thanks in advance

Corday · May 16, 2022

Go to Local Disc "C" File Explorer. Allow Hidden Files & Folders to be viewed. Then in #1, leave out Service from your posted chain. Now just delete the Folders.

jccruz · May 16, 2022

Thanks Corday, do you mean to leave de "Service" folder and delete the other ones, CacheManager can't be deleted.

Many thanks

NumberFiveee · May 16, 2022

jccruz said:
Thanks Corday, do you mean to leave de "Service" folder and delete the other ones, CacheManager can't be deleted.

Many thanks

I think you just need to delete the SERVICE folder.

You should see logs inside called for example HISTORY and SCANS.

jccruz · May 16, 2022

I'm getting no results even from this tutorial...

Thanks anyway!

Corday · May 16, 2022

You showed this: 1) C:\ProgramData\Microsoft\WindowsDefender\Scans\History\Service
I meant this: 1) C:\ProgramData\Microsoft\WindowsDefender\Scans\History
Then follow my Post #2.

Corday · May 16, 2022

ALTERNATE Method:
If you're still having trouble go to: https://www.tenforums.com/antivirus...urity-center-defender-protection-history.html Scroll to Post #6. This not only works, but it gives an option to preserve the files or completely delete them.

jccruz · May 16, 2022

Corday said:
ALTERNATE Method:
If you're still having trouble go to: https://www.tenforums.com/antivirus...urity-center-defender-protection-history.html Scroll to Post #6. This not only works, but it gives an option to preserve the files or completely delete them.

Not working for me, thanks anyway!

Corday · May 16, 2022

I just used the alternate to clear on 3 computers. Where are you hitting a snag?

jccruz · May 16, 2022

I've just done what's in the forum you mentioned, cleared the log but still gives me the populated page shown in my first post, thanks.

Corday · May 16, 2022

How are you accessing that page?

jccruz · May 17, 2022

Corday said:
How are you accessing that page?

In the same way described in the forum you've mentioned, mine is in portuguese;

NumberFiveee · May 17, 2022

Have you tried turning OFF Real-Time Protection and Cloud Protection prior to deleting the SERVICE folder?
And turning both back ON after.

jccruz · May 17, 2022

NumberFiveee said:
Have you tried turning OFF Real-Time Protection and Cloud Protection prior to deleting the SERVICE folder?
And turning both back ON after.

Yes!!!

Corday · May 17, 2022

And when you clear log, does everything go away? Do you then hit OK?

jccruz · May 17, 2022

Corday said:
And when you clear log, does everything go away? Do you then hit OK?

Yes!!! It’s weird i’ve tried several ways to clear the logs, although they are present in the history protection page, very weird!

Corday · May 17, 2022

Are you doing it with an Admin account?

jccruz · May 17, 2022

Corday said:
Are you doing it with an Admin account?

Yes!

Corday · May 17, 2022

Since the data constantly regenerates, are you sure it's not just the new stuff?

jccruz · May 17, 2022

Corday said:
Since the data constantly regenerates, are you sure it's not just the new stuff?

No, because if you take a look at my first post the dates are from 12th of may and older, if i make myself clear!

Unable to clear protection history in Windows Defender

Well-known member

Attachments

Moderator

Well-known member

Attachments

Well-known member

Well-known member

Moderator

Moderator

Well-known member

Moderator

Well-known member

Moderator

Well-known member

Well-known member

Well-known member

Moderator

Well-known member

Moderator

Well-known member

Moderator

Well-known member