How to Fix “Potentially Unwanted App Found” on Windows 10

If Windows 10 shows a “Potentially unwanted app found” warning, open Windows Security and review the detection before doing anything else. If you do not recognize the file, or you are unsure why it is on your PC, quarantine or remove it. Only choose Allow on device when you have verified the file is legitimate and you accept the risk.

What does “Potentially unwanted app found” mean?

Microsoft uses the term potentially unwanted application (PUA) for software that is not necessarily malware but may display unwanted advertising, bundle other programs, use system resources unexpectedly, or otherwise create behavior you may not want. Microsoft Defender and Microsoft Defender SmartScreen can block these apps through Windows Security.

Microsoft recommends keeping PUA protection enabled. You can review Microsoft’s current guidance in Protect your PC from potentially unwanted applications.

1. Review the detection in Protection history

Do not allow the app just to make the notification disappear. First, identify exactly what Windows Security detected.

1. Open Start and search for Windows Security.
2. Select Virus & threat protection.
3. Open Protection history.
4. Expand the newest Potentially unwanted app entry.
5. Check the detection name, affected file path, date, and current status.

If the file came from an unknown download, a bundled installer, a cracked program, or a site you do not trust, the safest choice is to remove or quarantine it. Microsoft notes that a detected PUA can remain blocked without being removed until you choose an action, so the same item may continue to appear in later scans.

2. Remove or quarantine the unwanted app

If you do not need the program, select the detection in Protection history and choose the available removal or quarantine action, then apply it. If the program is already installed, also uninstall it from Settings > Apps > Apps & features when it appears there.

After removal, delete any leftover installer you downloaded and run another Windows Security scan. If the warning returns, check the affected-item path again. A browser download, updater, or another installer may be recreating the same file.

3. Allow the app only if you have verified it

If you are confident the detection is a false positive, you can allow the file. In Protection history, expand the detection, open Actions, and choose Allow on device if that option is available. Administrator approval may be required.

Before allowing it, verify the publisher, download source, and digital signature when available. If you are still uncertain, submit the file to the Microsoft Security Intelligence file submission portal rather than creating a permanent exception.

If Microsoft Defender SmartScreen blocked the download before installation, Microsoft says you may need to allow the item and then download it again.

4. Undo an allowed threat later

If you allowed the wrong file, remove that exception instead of turning off protection for the whole PC. Open Windows Security > Virus & threat protection, find Allowed threats, select the item, and remove it from the allowed list. Windows Security can then block the file again if it is detected.

Keep potentially unwanted app blocking turned on

Do not disable Reputation-based protection simply to hide the message. In Windows 10, go to Windows Security > App & browser control > Reputation-based protection settings. Keep Potentially unwanted app blocking enabled. Microsoft recommends enabling both Block apps and Block downloads; the download-blocking option applies to Microsoft Edge, while app blocking can detect downloaded or installed PUAs on the device.

What if the warning keeps coming back?

• Take an action on the detection. A blocked item can remain in Protection history until you decide how to handle it.
• Remove the original installer or download. If it remains in Downloads or another folder, future scans can detect it again.
• Check for a program that recreates the file. Updaters, download managers, or bundled installers can restore a flagged component.
• Update Windows Security intelligence and scan again. This helps rule out an outdated detection.
• Do not manually delete Defender history files just to clear the alert. Protection history is a security record; hiding it does not fix the underlying detection.

For details on the meanings of alerts and allowed items, see Microsoft’s Protection History documentation. The important choice is simple: remove a PUA you do not trust, or allow it only after you have verified that the detection is incorrect.