Even with real-time protection enabled, you may notice unusual behavior on your PC. Pop-ups appear, programs slow down, or you receive warnings from third-party tools. In those moments, running a manual malware check gives you direct control over your system’s health. Windows Defender, now called Windows Security, includes a built-in scanner that checks your files, running programs, and memory for known threats. This guide walks you through the exact steps to trigger a manual scan, choose the right scan type, and handle any detected issues.
Before You Start: Make sure your PC is connected to the internet. Windows Defender relies on cloud-delivered protection and the latest virus definitions to identify modern threats. If you recently switched to a third-party antivirus, Windows Defender will pause automatically and you will need to reactivate it before proceeding.
Step 1: Open Windows Security
Click the Start button and type Windows Security, then select the app from the results. This launches the central hub where Microsoft bundles all your protection settings. You will see a grid of icons representing different security features like firewall, account protection, and device performance. If the app fails to open, press Win + I to open Settings, navigate to Privacy & security, and click Windows Security at the bottom of the page.
Step 2: Navigate to Virus & threat protection
Click the Virus & threat protection tile in the top-left corner of the Windows Security window. This section houses the core scanning engine and threat history logs. The page loads with a summary of your current protection status and a quick link to run a scan. Look for the blue Quick scan button near the top of the panel, but do not click it yet since you want to explore all available options.
Step 3: Select Scan Options
Click the Scan options link located directly beneath the Quick scan button. Windows Defender offers three distinct scan types, each designed for a different level of thoroughness. The Quick scan checks only the areas where malware typically hides, such as your desktop, startup folders, and active memory. The Full scan examines every file on your drives, which takes significantly longer but catches deeply embedded threats. The Custom scan lets you pick specific folders, drives, or files to check, which is useful when you suspect a particular download or external drive.
Step 4: Choose Your Scan Type and Start
Select your preferred scan type from the list, then click Scan now. The system will immediately begin checking your selected areas against Microsoft’s threat database. You will see a progress bar and a counter showing how many files have been examined. If you choose a Full scan, expect the process to run for thirty minutes to several hours depending on your drive size and storage speed. You can minimize the window and continue working, but keeping the app visible lets you monitor progress and respond to prompts faster.
Step 5: Review Results and Take Action
When the scan finishes, click View scan results to see a detailed report. Windows Defender lists every detected item along with its threat type and current status. If the report shows threats, click the drop-down menu next to each item and choose Quarantine or Remove. Quarantine isolates the file so it cannot run while allowing you to restore it later if it was a false positive. After handling the listed items, click Close and return to the main Virus & threat protection page to confirm your protection status shows as active.
Pro Tip: If you suspect a specific file or folder is causing problems, use the Custom scan option instead of waiting for a Full scan. You can point it directly at your Downloads folder, a USB drive, or a network share to save time while still getting a thorough check.
Troubleshooting Common Issues
- Windows Defender will not start or the scan button is grayed out. This usually happens when another antivirus program is already managing your protection. Open Settings > Privacy & security > Windows Security, then toggle off Windows Defender to let the third-party app take over. If you want to use Defender instead, uninstall the competing software through Settings > Apps, restart your PC, and Defender will reactivate automatically.
- The scan runs but detects no threats despite suspicious behavior. Modern malware sometimes uses fileless techniques that live only in memory or modify system processes. Run a Full scan from Safe Mode by typing
msconfig, checking Boot options > Safe boot, restarting, and then running the Defender Full scan. After the scan, return tomsconfigand uncheck Safe boot to resume normal startup. You can also check the Windows Event Viewer for recent security warnings by pressingWin + Xand selecting Event Viewer > Windows Logs > Security. - Scan results show a Could not complete the scan error. Corrupted system files or pending Windows updates often block the scanner. Open Settings > Windows Update and install any available updates, then restart. If the error persists, run a system file check by opening Command Prompt as administrator and typing
sfc /scannow. Wait for the process to finish, then try the Defender scan again.
Running a manual malware check takes only a few minutes for a quick sweep and a bit more patience for a complete drive review. Keeping Windows Defender updated and knowing how to trigger a manual scan gives you a reliable safety net alongside any third-party tools you may use. Check your system weekly, especially after downloading new software or visiting unfamiliar websites, to catch threats before they spread.
What is the longest you have ever waited for a Windows Defender Full scan to finish, and did it catch anything unexpected?
Over to you: What is the longest you have ever waited for a Windows Defender Full scan to finish, and did it catch anything unexpected?
