Defender Scan History
Windows Defender stores scan history under ProgramData as detection records, remediation logs, quarantine metadata references, and supporting service state files created by the Microsoft Defender Antivirus engine so it can show recent threats and actions in Windows Security. Over time, this history can become bloated or inconsistent after engine updates, failed remediations, or interrupted scans, leaving old entries behind even when the underlying threat is gone. Kudu clears the Defender Scans History folder contents that make up this local history store without touching your documents, accounts, passwords, or current Defender settings.
Why clean Defender Scan History?
- Old detection and remediation records can linger after a threat was already removed, so Windows Security keeps showing past items or repeated protection history entries that no longer reflect the current system state
- Interrupted or failed scans can leave partial history data behind, which may cause confusing protection history results such as blank details, duplicate detections, or entries that never clear
- Defender engine and platform updates can invalidate older local history state, leading to mismatched timestamps or stale threat names that make recent security events harder to interpret
- A heavily accumulated Scans History folder can consume unnecessary space in ProgramData, which users notice as unexpectedly large Defender-related files when checking disk usage
- Corrupted history files can make Protection History load slowly or show incomplete remediation information even though real-time protection itself is still running normally
- After malware cleanup, stale local history can make it look like the infection is still active, causing repeated concern when scans are clean but old alerts remain visible
- Administrative cleanup is sometimes needed because Defender stores this history in a protected system location, and users may otherwise be unable to remove stuck records through the normal interface
Cache paths Kudu targets
Windows
%ProgramData%/Microsoft/Windows Defender/Scans/History |
Common questions about Defender Scan History
Download Kudu and reclaim your disk space.
Available on Windows, macOS, and Linux. No account required, no feature gates, no telemetry without consent. All cleaning targets are open source and community-auditable.