"Unwanted app" message keeps appearing

Edward Weinberger 0 Reputation points
2026-09-18T16:06:20.7+00:00

I keep getting the message "Potentially unwanted app found" from Windows Defender. How do I find out what the app is? How do I make sure that the app is deleted if I really don't want it? How can I prevent this from happening again?

Windows for home | Windows 11 | Security and privacy
0 comments

3 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-09-18T16:06:35.9+00:00

    Use Windows Security to identify the item and confirm what action Defender took:

    1. Open Windows Security.
    2. Go to Protection history.
    3. Look for the alert under Potentially unwanted apps or Threat blocked.
      • If Defender blocked it, the entry shows that the threat was blocked and removed.
      • If the alert says Remediation incomplete, open the card to see the additional steps required.
    4. If the notification was prefixed with PUA:, that indicates a potentially unwanted application detection.

    To make sure the app is removed:

    1. In Windows Security, review the detection in Protection history.
    2. If the app was blocked, Defender moves the detected file to quarantine.
    3. If the unwanted software installed an app entry, remove it from Settings > Apps > Apps & features:
      • Select the app.
      • Choose Uninstall.
    4. If the issue started recently, sort apps by install date and uninstall recent apps that were not intentionally installed.
    5. Remove suspicious browser add-ons in browsers such as Internet Explorer, Firefox, or Chrome, because unwanted software can also arrive as browser extensions.

    To help prevent it from happening again:

    1. Keep Potentially unwanted app blocking enabled.
      • In Windows Security, go to App & browser control > Reputation-based protection.
    2. Download software only from official websites or the Microsoft Store.
    3. Be cautious with third-party download sites.
    4. Use Microsoft Edge, which includes protections such as SmartScreen and blocks known websites hosting unwanted software.
    5. Keep Microsoft Defender Antivirus enabled for real-time protection.

    If a blocked item was actually safe, Protection history lets the file be allowed for future detections, but that only applies the next time the file is seen and the file must be downloaded again. Allowing a file reduces protection, so only do that when the file is trusted.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Bence Weiszmann 1,815 Reputation points
    2026-09-18T16:09:36.6633333+00:00

    Dear @Edward Weinberger

    You can find out what Defender is detecting in Windows Security --› Virus & threat protection --› Protection history. Open the detection to see the name, affected file and what action Defender took. https://support.microsoft.com/en-us/windows/security/windows-security/protection-history-in-the-windows-security-app

    Best regards,
    Bence

    Was this answer helpful?

    0 comments
  3. SD - IA 179.9K Reputation points Independent Advisor
    2026-09-18T16:42:56.11+00:00

    Hi,

    Open Windows Security → Virus & threat protection → Protection history. Expand the latest Potentially unwanted app detection.

    If the detected item corresponds to an installed application, also go to Settings → Apps → Installed apps, locate it, select ⋯ → Uninstall.

    I look forward to hearing from you to get the results of the troubleshooting.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.