First, confirm whether it is a false positive and use tools such as VirusTotal to detect file security; 2. If you are sure that the file is safe, you can temporarily close the real-time protection of Microsoft Defender; 3. It is recommended to add files or folders to the Defender exclusion list for a long time to resolve; 4. If the file has been quarantined, you can recover from the protection history; 5. Check and update the Defender virus definition; 6. Advanced users can try to extract files from the command line; finally be sure to verify that the file is safe before operating to avoid permanently closing the protection.

You're seeing the error “Operation did not complete successfully because the file contains a virus” in Windows Defender (Microsoft Defender Antivirus) when trying to access or extract a file. While this message usually means a file is generally infected, sometimes it's a false positive — especially when dealing with legitimate software, scripts, or self-created archives.

Here's how to fix or work around this issue:

? 1. Confirm It's a False Positive (Check the File)

Before bypassing security, make sure the file is safe .

• Scan the file with other antivirus tools :
  • Upload it to VirusTotal.com — it checks your file against 70 antivirus engines.
  • If only Microsoft Defender flags it and others don't, it's likely a false positive .
• If you created the file yourself (eg, a script, compiled program, or ZIP), and you're confident it's clean, proceeded cautiously.

?? Never ignore this warning for files from unknown or untrusted sources.

? 2. Temporarily Disable Microsoft Defender (Use with Caution)

If you're certain the file is safe, you can temporarily turn off real-time protection to access it.

Steps:

1. Open Windows Security :
   • Press Win S , type Windows Security , and open it.
2. Go to Virus & threat protection .
3. Click Manage settings under "Virus & threat protection settings".
4. Toggle off Real-time protection .
   • ? This is temporary — Windows may re-enable it automatically after 10–15 minutes, especially on Home editions.
5. Now try opening or extracting the file.
6. Re-enable Real-time protection immediately after.

? Note: Don't leave this off longer than necessary. It leaves your system vulnerable.

? 3. Add an Exclusion in Microsoft Defender

If you need to keep using the file regularly, add it (or its folder) to the exclusion list .

How to add an explanation:

1. Open Windows Security > Virus & threat protection .
2. Click Manage settings under "Virus & threat protection settings".
3. Scroll down to Exclusions > Add or remove excclusions .
4. Click Add an exclusion and choose:
   • File (specific file)
   • Folder (entire folder, eg, your project folder)
   • File type (extension, eg, .exe )
   • Process
5. Browse and select your file or folder.

Now, Defender will ignore it during scans.

? Tip: Use folder exclusions if you're working with development projects or scripts that get flagged often.

? 4. Restore the File from Quarantine (If Already Removed)

If Defender already deleted or quarantined the file:

1. Open Windows Security .
2. Go to Protection history (under "Virus & threat protection").
3. Look for the file listed as "Quarantined".
4. Select it and click Restore (and optionally Allow on device ).

?? Only restore if you're 100% sure it's safe.

? 5. Check for Outdated Defender Signatures

Sometimes outdated virus definitions cause incorrect behavior.

• Open Windows Security > Virus & threat protection .
• Under Virus & threat protection updates , click Check for updates .
• Update and then retest the file.

? 6. Use Command Line (For Advanced Users)

If GUI methods fail, you can extract ZIP files via command line — sometimes bypassing Defender during extraction (though Defender may still block access afterward).

 mkdir output_folder
tar -xf "C:\path\to\your\file.zip" -C output_folder

This uses built-in Windows tar (available in Windows 10/11). If the file is blocked, even this may fail.

Final Notes

• Microsoft Defender is generally accurate — treat this error seriously.
• Developers and IT pros often face false positives with .exe , .ps1 , .bat , or packed files.
• Exclusions are the cleanest long-term fix for trusted files.
• Never disable Defender permanently — use excclusions instead.

Basically, it comes down to: verify safety → exclude or restore → re-enable protection .
Don't skip the verification step — your system's security depends on it.

The above is the detailed content of how to fix 'operation did not complete successfully because the file contains a virus' win defender error. For more information, please follow other related articles on the PHP Chinese website!