Running an Offline Scan with Microsoft Defender in Windows

The Microsoft Defender Offline Scan is a powerful tool that allows you to scan your system for malware outside the regular Windows environment. This is particularly effective for identifying and removing advanced threats, such as rootkits, which may evade standard antivirus scans.

When to Use an Offline Scan

Consider running an offline scan in the following cases:

  • If you suspect the presence of malware that regular scans haven't detected.
  • If your system exhibits suspicious behavior, such as unexpected reboots, reduced performance, or the appearance of unknown programs.
  • If Microsoft Defender itself recommends performing an offline scan.

How to Start a Microsoft Defender Offline Scan

Follow these steps to initiate an offline scan:

  1. Save any open files and close all applications.
  2. Click Start and open Settings (gear icon).
  3. Go to Update & Security, then select Windows Security.
  4. Click Virus & threat protection.
  5. Under Current threats, select Scan options, and then choose Microsoft Defender Offline scan.
  6. Click Scan now.

Your computer will restart, and the offline scan will begin, usually taking about 15 minutes. Once completed, the system will reboot back into normal mode.

Viewing Scan Results

To review the results of your offline scan:

  1. Open Windows Security.
  2. Go to Virus & threat protection.
  3. Click on Protection history (or Threat history in older versions).

This section will provide detailed information about any threats that were detected and resolved.

Additional Resources

For further details on using the Microsoft Defender Offline Scan, refer to the official Microsoft support page: Protect Your PC with Microsoft Defender Offline.