Running a manual malware scan is one of the most reliable ways to verify your system health. Windows Defender, now called Microsoft Defender Antivirus, runs quietly in the background, but it does not always catch everything on its own schedule. When you notice unusual pop-ups, sluggish performance, or suspicious browser redirects, taking control and running a targeted scan gives you immediate visibility into potential infections. This guide walks you through the exact process of initiating a manual scan through Windows 11, explains which scan type fits your situation, and shows you how to interpret the results without panicking.
Before You Start: Make sure your PC is connected to the internet so Defender can download the latest threat definitions. You will also need administrator privileges on your account, which standard home accounts already have by default.
Step 1: Open Windows Security
Press Windows + S to open the search bar and type Windows Security. The system will surface the Windows Security app at the top of the results. Click that entry to launch the dedicated security dashboard. This app replaces the older Windows Defender interface and acts as the central hub for all your protection settings, including firewall rules, account security, and device performance monitoring.
Step 2: Navigate to Virus & threat protection
Locate the left-hand navigation pane and click Virus & threat protection. The main dashboard will immediately display your current protection status, recent action history, and quick access buttons for common tasks. You will see a green checkmark if Defender is actively monitoring your system. If you see a yellow warning icon instead, click the link beneath it to update your definitions or adjust your settings before proceeding.
Step 3: Select Scan options
Scroll down to the Virus & threat protection settings section and click Scan options. This link sits directly beneath the quick scan button and opens a dedicated page listing every available scanning method. Windows Defender offers four distinct approaches, each designed for a different level of system inspection. You will see a brief description under each option that explains what files and locations the scan will cover.
Step 4: Choose your preferred scan type
Review the four available options and select the one that matches your current issue. The Quick scan checks running processes, startup items, and key system folders, making it ideal for routine checks. The Full scan examines every file on your drives, which takes longer but catches deeply hidden threats. The Custom scan lets you pick specific folders or drives, useful when you suspect a particular external drive is infected. The Microsoft Defender Offline scan restarts your PC into a secure environment to remove stubborn malware that protects itself while Windows runs. Pick the option that aligns with your symptoms and click Next.
Step 5: Start the scan and monitor progress
Click the Scan now button to begin the process. A progress bar will appear at the top of the window, showing the percentage of files already examined. You can minimize the window and continue using your PC during a quick scan, but you should keep the dashboard visible for full or offline scans. If the progress bar freezes for more than ten minutes, do not force close the application. Instead, wait another five minutes, as large drives or heavily fragmented files can temporarily slow the indexing process.
Step 6: Review and handle the results
Wait for the scan to finish and read the summary screen carefully. Defender will list every detected item, classify its threat level, and recommend an action for each one. Click the View details link next to any flagged item to see its file path, detection name, and severity rating. For most items, you should choose Remove or Quarantine, which isolates the file so it cannot execute. If Defender asks whether to take action on all detected items, confirm the bulk action to clear the queue without clicking each entry individually.
Troubleshooting common issues
If you run into problems during the manual scan process, check these three frequent failure points before assuming your system is compromised.
- The scan will not start or immediately closes. This usually happens when another antivirus program is already active. Open Windows Security, click App & browser control, and verify that Controlled folder access or real-time protection is not being overridden by a third-party suite. Disable the competing software temporarily, restart your PC, and try the scan again.
- Defender reports no threats, but your PC still acts strangely. Run the scan using the Microsoft Defender Offline option instead. Standard scans cannot always remove rootkits or boot-sector infections because those threats load before Windows finishes starting. The offline environment bypasses those protections and forces the malware to reveal itself.
- Scan results show a file you recognize as important. Click the item, select Actions, and choose Allow on device. You can also add the file or folder to your exclusions list under Virus & threat protection settings. Keep in mind that adding too many exclusions weakens your overall protection, so only exclude trusted files and folders.
Final tips for ongoing protection
Running a manual scan is a reactive measure, but pairing it with smart habits keeps your system secure between checks. Schedule a weekly quick scan through the Windows Security dashboard so you never have to remember to trigger it manually. Keep Windows Update enabled, as security patches frequently close the exact vulnerabilities malware exploits. If you frequently download files from untrusted sources, consider enabling Cloud-delivered protection under Virus & threat protection settings to route suspicious files through Microsoft’s threat intelligence network.
Pro Tip: Right-click any suspicious file in File Explorer and select Scan with Microsoft Defender from the context menu. This skips the dashboard entirely and runs an instant on-demand scan on that specific item.
Following these steps gives you full control over your system’s security posture. You now know exactly where to look, which scan type to trust, and how to interpret the results without second-guessing yourself.
Over to you: Have you ever caught a hidden threat before it caused real damage to your files?
