Run a Microsoft Defender Offline scan to rule out a process repeatedly recreating or accessing the threat, and then disable the successful-block informational notification if the scan is clean.
1. Check what Defender is repeatedly blocking
Open Windows Security → Virus & threat protection → Protection history, expand several entries, and compare:
- Threat name
- Affected item/file path
- Time detected
- Action taken
If the same threat and path appear every three minutes, treat this as a recurring detection rather than merely an old notification. Do not select Allow on device just to stop it; “Allow” does not remediate the threat and only suppresses subsequent detections.^1^
2. Run Microsoft Defender Offline
A recurring item can be caused by a hidden component that recreates the detected file. Defender Offline scans before normal Windows starts, making persistent malware more difficult to hide.^2^
- Save all open work—the computer will restart.
- Open Windows Security.
- Select Virus & threat protection → Scan options.
- Select Microsoft Defender Antivirus (offline scan).
- Select Scan now.
- After Windows restarts and the scan finishes, return to Protection history to review the result.
Microsoft documents this scan specifically for suspected persistent malware or when a scan outside the normal Windows environment is needed.^3^
If new detections continue at the same interval after the offline scan, use the affected file path and threat name to identify the program, browser download, scheduled process, or other source recreating it. Removing only the detected file will not stop alerts if another component keeps producing it.
If Defender continues showing notifications only to report that it successfully blocked the item:
- Open Windows Security.
- Select Settings at the lower left.
- Select Manage notifications.
- Under Virus & threat protection notifications, turn off the informational notification option that reports recent activity or successfully blocked threats.
These controls suppress informational messages such as successful blocks and completed scans. Windows Security will still show notifications for problems requiring immediate action.^4^
If the banner still appears, Windows 11 also provides an app-level banner control:
- Open Start → Settings → System → Notifications.
- Select Windows Security under Notifications from apps and other senders.
- Turn off Show notification banners.
This can leave entries available in Notification Center while preventing pop-up banners, depending on the other options selected.^5^
Avoid disabling Microsoft Defender, real-time protection, or all Windows Security notifications; those actions hide warnings without addressing whatever is triggering the repeated detection.
References
- Review event logs and error codes to troubleshoot issues with Microsoft Defender Antivirus
- Troubleshoot problems with detecting and removing malware | Microsoft Support
- Virus and Threat Protection in the Windows Security App | Microsoft Support
- Windows Security App Settings | Microsoft Support
- [Windows 11](https://support.microsoft.com/windows/experience/notifications-and-do-not-disturb-in-windows#configure-notifications)