Understanding Windows Defender alert levels

Alert levels help you choose how to respond to spyware and potentially unwanted software. While Windows Defender will recommend that you remove spyware, not all software that is detected is malicious or unwanted. The information in this table can help you decide what to do if Windows Defender detects potentially unwanted software on your computer.

Alert level What it means What to do
Severe Widespread or exceptionally malicious programs, similar to viruses or worms, which negatively affect your privacy and the security of your computer, and can damage your computer. Remove this software immediately.
High Programs that might collect your personal information and negatively affect your privacy or damage your computer, for example, by collecting information or changing settings, typically without your knowledge or consent. Remove this software immediately.
Medium Programs that might affect your privacy or make changes to your computer that could negatively impact your computing experience, for example, by collecting personal information or changing settings. Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.
Low Potentially unwanted software that might collect information about you or your computer or change how your computer works, but is operating in agreement with licensing terms displayed when you installed the software. This software is typically benign when it runs on your computer, unless it was installed without your knowledge. If you're not sure whether to allow it, review the alert details or check to see if you recognize and trust the publisher of the software.
Not yet classified Programs that are typically benign unless they are installed on your computer without your knowledge. If you recognize and trust the software, allow it to run. If you do not recognize the software or the publisher, review the alert details to decide how to take action. If you're a SpyNet community member, check the community ratings to see if other users trust the software.

Related Topics

Understanding Windows Defender real-time protection

Join the Microsoft SpyNet community

Keep Windows Defender definitions up to date