Help protect my PC with Windows Defender Offline

Applies to: Windows 7Windows 8.1Windows 10

Windows Defender Offline is a powerful offline scanning tool that runs from a trusted environment, without starting your operating system. This topic describes using Windows Defender Offline in Windows 10, Windows 8.1, and Windows 7.

When should I use Windows Defender Offline?

Run Windows Defender Offline if:

Windows Security (called Windows Defender Security Center in previous versions of Windows) detects rootkits or other highly persistent malware on your PC and alerts you to use Windows Defender Offline. You might see a message saying that malware was found on your device, or a message in Windows Security notifying you that additional cleaning is required.
You suspect your PC has malware that might be hiding on your PC, but your security software doesn’t detect anything. In this case, you can start a Windows Defender Offline scan from Windows Security settings. Here's how:

Select the Start button, then select Settings > Update & Security > Windows Security > Virus & threat protection .
On the Virus & threat protection screen, do one of the following:
- In current version of Windows 10: Under Current threats, select Scan options.
- In previous versions of Windows: Under Threat history, select Run a new advanced scan.
Select Windows Defender Offline scan, and then select Scan now.

Note

Before you use Windows Defender Offline, make sure to save any open files and close apps and programs.

The Windows Defender Offline scan takes about 15 minutes to run, and then your PC will restart.

Where can I find scan results?

To see the Windows Defender Offline scan results:

Select the Start button, then select Settings > Update & Security > Windows Security > Virus & threat protection .
On the Virus & threat protection screen, do one of the following:
- In current version of Windows 10: Under Current threats, select Scan options, and then select Threat history.
- In previous versions of Windows: Select Threat history,

Using Windows Defender Offline on Windows 7 and Windows 8.1

If you're using Windows Defender Offline on Windows 7 or Windows 8.1, you need to follow four basic steps:

Download Windows Defender Offline and create a CD, DVD, or USB flash drive.
Restart your PC using the Windows Defender Offline media.
Scan your PC for malicious and other potentially unwanted software.
Remove any malware that is found from your PC.

Windows Defender Offline will walk you through the details of these four steps when you're using the tool. If you've been prompted in Microsoft Security Essentials or Windows Defender Security Center to download and run Windows Defender Offline, it's important that you do so, to make sure that your data and your PC isn't compromised.

To get started, find a blank CD, DVD, or USB flash drive with at least 250 MB of free space and then download and run the tool—the tool will help you create the removable media.

Note

We recommend that you download Windows Defender Offline and create the CD, DVD, or USB flash drive on a PC that isn't infected with malware—the malware can interfere with the media creation.

Download the 32-bit version

Download the 64-bit version

If you're not sure which version to download, see Is my PC running the 32-bit or 64-bit version of Windows?

Last Updated: 2 Oct 2018