Windows Defender Offline is a powerful offline scanning tool that runs from a trusted environment, without starting your operating system. This topic describes using Windows Defender Offline in Windows 10, Windows 8.1, and Windows 7.
When should I use Windows Defender Offline?
Run Windows Defender Offline if:
- Windows Security (called Windows Defender Security Center in previous versions of Windows) detects rootkits or other highly persistent malware on your PC and alerts you to use Windows Defender Offline. You might see a message saying that malware was found on your device, or a message in Windows Security notifying you that additional cleaning is required.
- You suspect your PC has malware that might be hiding on your PC, but your security software doesn’t detect anything. In this case, you can start a Windows Defender Offline scan from Windows Security settings. Here's how:
- Select the Start button, then select Settings > Update & Security > Windows Security > Virus & threat protection .
- On the Virus & threat protection screen, do one of the following:
- In current version of Windows 10: Under Current threats, select Scan options.
- In previous versions of Windows: Under Threat history, select Run a new advanced scan.
- Select Windows Defender Offline scan, and then select Scan now.
Before you use Windows Defender Offline, make sure to save any open files and close apps and programs.
The Windows Defender Offline scan takes about 15 minutes to run, and then your PC will restart.
Where can I find scan results?
To see the Windows Defender Offline scan results:
- Select the Start button, then select Settings > Update & Security > Windows Security > Virus & threat protection .
- On the Virus & threat protection screen, do one of the following:
- In current version of Windows 10: Under Current threats, select Scan options, and then select Threat history.
- In previous versions of Windows: Select Threat history,
Using Windows Defender Offline on Windows 7 and Windows 8.1
- Download Windows Defender Offline and create a CD, DVD, or USB flash drive.
- Restart your PC using the Windows Defender Offline media.
- Scan your PC for malicious and other potentially unwanted software.
- Remove any malware that is found from your PC.
We recommend that you download Windows Defender Offline and create the CD, DVD, or USB flash drive on a PC that isn't infected with malware—the malware can interfere with the media creation.
Download the 32-bit version
If you're not sure which version to download, see Is my PC running the 32-bit or 64-bit version of Windows?