Help protect my PC with Windows Defender Offline

Is van toepassing op: Windows 7Windows 8.1Windows 10

Windows Defender Offline is a powerful offline scanning tool that runs from a trusted environment, without starting your operating system. This topic describes how to use Windows Defender Offline in Windows 10, Windows 8.1, and Windows 7.

When should I use Windows Defender Offline?

Run Windows Defender Offline if:

  • Windows Security (named Windows Defender Security Center in previous versions of Windows) detects rootkits or other highly persistent malware on your PC and alerts you to use Windows Defender Offline. You might see a message stating that malware was found on your device, or receive a message in Windows Security notifying you that additional cleaning is required.
  • You suspect your PC might have malware that's hiding on it, but your security software doesn’t detect anything. In this situation, you can start a Windows Defender Offline scan from Windows Security settings. Here's how:
  1. Select Start , and then select Settings  > Update & Security  > Windows Security  > Virus & threat protection .
  2. On the Virus & threat protection screen, do one of the following:
    • In an up-to-date version of Windows 10: Under Current threats, select Scan options.
    • In previous versions of Windows: Under Threat history, select Run a new advanced scan.
  3. Select Windows Defender Offline scan, and then select Scan now.

Windows Defender Offline start scan
 

You'll be prompted that you're about to be signed out of Windows. After you are, your PC should restart. Windows Defender Offline will load and perform a quick scan of your PC in the recovery environment. When the scan has finished (after about 15 minutes), your PC will automatically restart to Windows.

Where can I find scan results?

To see the Windows Defender Offline scan results:

  1. Select Start , and then select Settings  > Update & Security  > Windows Security  > Virus & threat protection .
  2. On the Virus & threat protection screen, do one of the following:
    • In an up-to-date version of Windows 10: Under Current threats, select Scan options, and then select Threat history.
    • In previous versions of Windows: Select Threat history.

Using Windows Defender Offline on Windows 7 and Windows 8.1

If you're running Windows Defender Offline on Windows 7 or Windows 8.1, follow these four basic steps:
 
  1. Download Windows Defender Offline and install it to a CD, DVD, or USB flash drive.

    Windows Defender Offline removable media options
  2. Restart your PC using the Windows Defender Offline media. This means having the CD, DVD, or flash drive you created in step 1 inserted in the PC when you restart it. Follow the prompts to boot from the drive containing this media.
  3. Scan your PC for viruses and other malware.
  4. Remove any malware that's found from your PC.
Windows Defender Offline will walk you through these four steps when you're using the tool. If you've been prompted in Microsoft Security Essentials or Windows Defender Security Center to download and run Windows Defender Offline, it's important to do so. Doing this helps make sure that your data and PC aren't compromised.
 
To get started, find a blank CD, DVD, or USB flash drive with at least 250 MB of free space, and then download and run the tool. You'll be guided through the steps to create the removable media.
 

Download the 32-bit version 

Download the 64-bit version

If you're not sure which version to download, see Is my PC running the 32-bit or 64-bit version of Windows?