How-To

How to Manually Scan for Malware with Windows Defender on Windows 11

5 min read Editorial

Windows Defender runs silently in the background to protect your PC, but there will come a time when you need to take matters into your own hands. Maybe you downloaded a file from an unfamiliar website, noticed your computer running slower than usual, or you just want peace of mind before handing your machine to a family member. Triggering a manual malware scan gives you immediate control over your system’s security posture. This guide walks you through the exact steps to run a thorough check using the built-in Windows Security app on Windows 11.

Before You Start: Make sure you are signed in with an administrator account, as standard user accounts cannot modify security settings. Keep your PC connected to the internet so Defender can download the latest virus definition updates before the scan begins.

Step 1: Open Windows Security

Click the Start button and type Windows Security, then press Enter. This launches the central hub for all your system safety tools, including firewall controls, account protection, and device performance monitoring. You will see a grid of colorful tiles representing different security categories. If you prefer using keyboard shortcuts, you can also press Windows + I to open Settings, navigate to Privacy & security, and select Windows Security from the right panel. The app requires administrator privileges to modify scan settings, so you might see a permission prompt on corporate or managed devices.

Advertisement

Step 2: Navigate to Virus & Threat Protection

Locate and click the Virus & threat protection tile in the top left corner of the dashboard. This section acts as the command center for your malware scanning tools and displays the current protection status. You will see a large green shield icon if your PC is currently protected, along with a timestamp showing when your last automatic scan occurred. Below that status banner, you will find a row of actionable buttons, including the Scan options link that you will need for the next step. If the tile appears grayed out or unresponsive, your system might be running a third-party antivirus that has taken over primary protection duties.

A close-up view of the Windows 11 Virus & threat protection dashboard showing the Scan options button highlighted with a
The Scan options menu displays your available malware check types.

Step 3: Choose Your Scan Type

Click the Scan options link located beneath the Virus & threat protection status banner. Windows Defender offers three distinct scanning methods, each designed for different scenarios and time constraints. The Quick scan checks roughly forty locations where malware typically hides, including your desktop, startup folders, and active memory, and usually finishes in under fifteen minutes. The Full scan examines every file and running program on all connected drives, which provides the most thorough protection but can take several hours to complete. The Custom scan lets you pick specific folders, drives, or files to investigate, which is useful when you suspect a particular download is compromised. Select the option that matches your current situation and click the Scan now button at the bottom of the page.

Step 4: Start the Manual Scan

Wait for the progress bar to appear and allow the scan to run without interrupting it. The status window will display real-time statistics, including the number of files scanned, the current scan speed, and an estimated time remaining. You can continue using your PC for light tasks like web browsing or document editing while the scan runs in the background, though heavy gaming or video rendering might slow the process down. If the progress bar freezes for more than ten minutes or shows zero files scanned, press Ctrl + Shift + Esc to open Task Manager, locate the Windows Security service, and restart it to refresh the scan engine. You can also minimize the window and return to it later to check your progress.

Step 5: Review the Results

Click the Scan results link once the progress bar disappears to see a detailed report of your findings. If Defender found no threats, you will see a clean bill of health confirming your system is secure. If threats were detected, you will see a list of affected files along with the threat name and severity level. Click the Remove action next to each item to quarantine or delete the malicious files immediately. You can also click the View history link at the bottom of the results page to see how your PC performed during previous scans. If a file refuses to delete, restart your computer into Safe Mode and run another manual scan to bypass active malware processes.

Troubleshooting Common Issues

Even built-in tools can run into hiccups. Here are the most frequent problems users encounter when running a manual malware scan, along with straightforward fixes.

  • Defender will not open or crashes immediately: Corrupted system files often cause this behavior. Open cmd as an administrator and run sfc /scannow to repair damaged Windows components, then restart your PC and try again.
  • Scan gets stuck at zero percent or never finishes: Background updates or conflicting security software frequently block the scan engine. Disconnect any external USB drives, temporarily disable your third-party antivirus, and ensure your Windows Update service is running normally.
  • Threats keep reappearing after removal: Persistent malware often hides in startup programs or scheduled tasks. Open msconfig or Task Manager’s Startup tab, disable suspicious entries, and run a Full scan while your PC is in Safe Mode to catch hidden processes.
  • Definitions are outdated and the scan fails: Defender relies on daily cloud updates to recognize new threats. Navigate to Virus & threat protection settings, click Update definitions, and wait for the download to complete before restarting your scan.

Pro Tip: You can automate future checks by opening Windows Security, clicking Virus & threat protection settings, and toggling Scheduled scans to On. This keeps your system protected even when you forget to run a manual check.

Running a manual malware scan takes less than five minutes of your time but can save you from hours of troubleshooting, data loss, or expensive recovery services. Keep this guide bookmarked so you know exactly where to go whenever you suspect your PC might be compromised. Regular checks combined with Windows Defender’s automatic background protection create a layered defense that keeps your digital life secure.

A Windows Security notification window displaying a green checkmark and a list of scanned files with zero threats detect
The scan finishes and confirms your system is clean.

Have you ever caught a hidden threat by running a manual Defender scan on your Windows 11 machine?

Over to you: Have you ever caught a hidden threat by running a manual Defender scan on your Windows 11 machine?

Advertisement
Share:
Editorial
Written by
Editorial

Windows & Microsoft news editor at 9to5Windows. Covering everything from Windows 11 builds to enterprise updates.

Advertisement