How-To

How to Manually Scan for Malware with Windows Defender on Windows 11

4 min read Editorial

Running a manual malware scan is one of the most reliable ways to verify your PC’s safety. Windows Defender operates in the background, but triggering an on-demand check gives you direct control over what gets inspected and when. Whether you suspect a suspicious download or want to confirm your system is clean after a software update, this process puts you in charge.

Before You Start: This guide applies to Windows 11 and Windows 10. If you use Windows 11 Pro, Enterprise, or Education, the interface remains identical, though Group Policy settings in corporate environments might restrict manual scans.

  1. Step 1: Open Windows Security

    Click the shield icon in your taskbar or search for Windows Security. You will see a blue window with several tiles representing different protection categories. This hub replaces the older Security & Windows Defender Center from previous Windows versions. If you do not see the shield icon, press the Windows + S key, type Windows Security, and select the app from the results. The window loads instantly and displays your current protection status across multiple security layers.

  2. Step 2: Navigate to Virus & Threat Protection

    Click the Virus & threat protection tile in the top row. The page loads a dashboard showing your current protection status, last scan date, and threat history. Look for the Quick scan button on the right side, but do not click it yet. This screen gives you access to the full scanning menu, which is where you will choose your preferred inspection method. The dashboard also displays your real-time protection toggle and cloud protection status.

  3. Step 3: Select Your Scan Type

    Click the Scan options link beneath the Quick scan button. Windows Defender offers four distinct scanning modes, each designed for different scenarios. A Quick scan checks running programs and startup files, which takes roughly five to ten minutes. A Full scan examines every file and running program on your drives, which can take several hours. The Custom scan lets you pick specific folders or drives to inspect. The Windows Defender Offline scan restarts your PC to check for deep-rooted threats before Windows loads. Choose the option that matches your current security concern.

  4. A close-up of the Windows Security window highlighting the Virus and threat protection tile on a clean desktop backgroun
    The Virus and threat protection dashboard where you select your scan type.
  5. Step 4: Start the Manual Scan

    Select your preferred option and click the Scan now button. A progress bar appears at the bottom of the window, showing the percentage of files already inspected. Your PC will remain usable during a Quick or Custom scan, though performance may dip slightly. If you choose the Offline scan, your computer will restart into a blue pre-boot environment and automatically begin the inspection. Do not force a shutdown during this phase, as interrupting the process can leave your system in an unstable state. You can minimize the window and continue working while the scan runs in the background.

  6. Step 5: Review and Handle Results

    Wait for the scan to finish and read the summary at the top of the page. If Defender finds nothing, you will see a green checkmark confirming your PC is protected. If threats appear, click the Show results link to view a detailed list of affected files. You can choose to Quarantine items to isolate them safely or Remove them to delete the threat permanently. Windows Defender will prompt you to restart your browser or close specific apps if active malware was blocking the scan. Review each item carefully before taking action.

Troubleshooting Common Issues

Even straightforward security tools can run into hiccups. Here is how to resolve the most frequent problems you might encounter.

Advertisement
  • Scan will not start or hangs at zero percent: Close all running applications, especially web browsers and game overlays, then retry. If the issue persists, open Settings > Windows Update > Update history > Uninstall updates and remove the most recent cumulative update. Restart your PC and try the scan again.
  • Windows Defender is disabled or grayed out: Third-party antivirus software automatically turns off Windows Defender to prevent conflicts. Open your alternative security app and temporarily disable its real-time protection, then return to Windows Security to run your scan. If you cannot locate the toggle, check your system tray for the third-party app icon.
  • Scan results show no protection available: This usually indicates a corrupted security service. Open cmd as an administrator and run net stop WinDefend, followed by net start WinDefend. Alternatively, run sfc /scannow in an elevated command prompt to repair damaged system files.

Final Tips for Ongoing Protection

Running a manual scan occasionally keeps your security posture sharp. Schedule a weekly Quick scan during a time when you can step away from your desk. Pair this habit with Windows Update to ensure your threat definitions stay current.

Pro Tip: Enable Cloud-delivered protection in the Virus & threat protection settings. This feature sends suspicious file samples to Microsoft for instant analysis, which dramatically speeds up detection for newly discovered malware.

Regular manual checks take less than ten minutes but provide peace of mind. Your system will thank you for the routine maintenance.

A laptop screen displaying a completed Windows Defender scan results page with a green checkmark and threat summary.
The scan results screen confirming your PC is clean.

Have you ever caught a hidden threat running a manual Windows Defender scan?

Over to you: Have you ever caught a hidden threat running a manual Windows Defender scan?

Advertisement
Share:
Editorial
Written by
Editorial

Windows & Microsoft news editor at 9to5Windows. Covering everything from Windows 11 builds to enterprise updates.

Advertisement