Unable to clear protection history in Windows Defender

[jccruz]

Trying to clear the Windows Defender protection history, with no success:

1) C:\ProgramData\Microsoft\WindowsDefender\Scans\History\Service (deleting this folder "service", then turnning off and on protection in real time & cloud protection.), reboot windows.

2) Clearing the log through "event viewer."

3) Switching to 1 day the rule "Turn on removal of items from scan history folder" in gpedit.msc

4) In a privileged PowerShell running the command "Set-MpPreference -ScanPurgeItemsAfterDelay 1"

Im always getting the log populated as the image attached.

Any ideas?!?

Thanks in advance

 

[Corday]

Go to Local Disc "C" File Explorer. Allow Hidden Files & Folders to be viewed. Then in #1, leave out Service from your posted chain. Now just delete the Folders.

 

[jccruz]

Thanks Corday, do you mean to leave de "Service" folder and delete the other ones, CacheManager can't be deleted.

Many thanks

 

[NumberFiveee]

Thanks Corday, do you mean to leave de "Service" folder and delete the other ones, CacheManager can't be deleted.

Many thanks

I think you just need to delete the SERVICE folder.

You should see logs inside called for example HISTORY and SCANS.

 

[jccruz]

I'm getting no results even from this tutorial...

Thanks anyway!

 

[Corday]

You showed this: 1) C:\ProgramData\Microsoft\WindowsDefender\Scans\History\Service
I meant this: 1) C:\ProgramData\Microsoft\WindowsDefender\Scans\History
Then follow my Post #2.

 

[Corday]

ALTERNATE Method:
If you're still having trouble go to: https://www.tenforums.com/antivirus...urity-center-defender-protection-history.html Scroll to Post #6. This not only works, but it gives an option to preserve the files or completely delete them.

 

[jccruz]

ALTERNATE Method:
If you're still having trouble go to: https://www.tenforums.com/antivirus...urity-center-defender-protection-history.html Scroll to Post #6. This not only works, but it gives an option to preserve the files or completely delete them.

Not working for me, thanks anyway!

 

[Corday]

I just used the alternate to clear on 3 computers. Where are you hitting a snag?

 

[jccruz]

I've just done what's in the forum you mentioned, cleared the log but still gives me the populated page shown in my first post, thanks.

 

[Corday]

How are you accessing that page?

 

[jccruz]

How are you accessing that page?

In the same way described in the forum you've mentioned, mine is in portuguese;

 

[NumberFiveee]

Have you tried turning OFF Real-Time Protection and Cloud Protection prior to deleting the SERVICE folder?
And turning both back ON after.

 

[jccruz]

Have you tried turning OFF Real-Time Protection and Cloud Protection prior to deleting the SERVICE folder?
And turning both back ON after.

Yes!!!

 

[Corday]

And when you clear log, does everything go away? Do you then hit OK?

 

[jccruz]

And when you clear log, does everything go away? Do you then hit OK?

Yes!!! It’s weird i’ve tried several ways to clear the logs, although they are present in the history protection page, very weird!

 

[Corday]

Are you doing it with an Admin account?

 

[jccruz]

Are you doing it with an Admin account?

Yes!

 

[Corday]

Since the data constantly regenerates, are you sure it's not just the new stuff?

 

[jccruz]

Since the data constantly regenerates, are you sure it's not just the new stuff?

No, because if you take a look at my first post the dates are from 12th of may and older, if i make myself clear!