To scan a Windows 10 or Windows 11 PC outside the normal Windows session, run Microsoft Defender Antivirus (offline scan) from Windows Security. Save your work first: the PC restarts, runs the scan in the Windows Recovery Environment, then restarts again. Check Protection history afterward to see the result. An offline scan can help when malware hides while Windows is running or keeps returning, but it is not a guaranteed cure.
What an offline virus scan does
Microsoft Defender Offline starts after Windows restarts and runs in the Windows Recovery Environment rather than in the normal Windows session. That can make it useful when a threat may be hiding while Windows is active. “Offline” describes where the scan runs; it does not mean you need a separate paid antivirus product or a USB drive. Microsoft explains the scan and its behavior.
Run Microsoft Defender Antivirus (offline scan)
- Save open work. The scan requires a restart, so save documents and close anything you do not want interrupted.
- Open Windows Security. Go to Virus & threat protection > Scan options.
- Choose the offline scan. Select Microsoft Defender Antivirus (offline scan), then start the scan. If Windows asks for confirmation to restart, approve it only after saving your work.
- Let the scan finish. The PC restarts into the Windows Recovery Environment, runs the scan, and restarts automatically when it is done.
- Review the result. Once Windows is running again, open Windows Security > Protection history.
Microsoft describes Defender Offline as a quick scan, but does not promise that it will remove every infection. Button names or availability can vary with Windows version and configuration. The current Microsoft support instructions are in Virus and threat protection in the Windows Security app.
Choose the next step based on what is happening
| Situation | What to do | Disruption and limits |
|---|---|---|
| Windows starts and you want a routine check | Run a regular scan from Windows Security. | Runs within the normal Windows session; it may be less suited to malware that hides while Windows is running. |
| Malware keeps returning, or may be hiding during normal use | Run Microsoft Defender Antivirus (offline scan). | Requires a restart and is not a guaranteed cure. |
| Detection or removal problems persist | Update Windows and security intelligence, then scan again. If the problem remains, consider Windows recovery or reinstalling from installation media with a clean installation. | A clean installation is disruptive and removes data from the selected drive. Understand backup and recovery implications first. |
| Windows will not start or recovery options do not work | Use another working PC to create Windows installation media on a USB drive, then use it for recovery or installation. | This is a fallback recovery option, not a requirement for Defender Offline. Installation choices can erase data. |
Microsoft recommends an offline scan for some persistent malware because malicious components can hide while Windows is running and reinstall after a restart. See Microsoft’s malware detection and removal troubleshooting guidance. For recovery options and installation media, consult Recovery options in Windows. Microsoft also advises keeping security intelligence updated and scanning for persistent unwanted software in Protect your PC from unwanted software.
Recommended Free Tools
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
If the offline scan option is missing
- Confirm that you are looking under Windows Security > Virus & threat protection > Scan options; labels may differ slightly by Windows version.
- If the option is still unavailable, your Windows configuration or security setup may differ from the documented path. Consult Microsoft’s current Windows Security scan instructions rather than assuming a USB scanner or third-party utility is required.
If malware returns after the scan
Update Windows and its security intelligence, then scan again. If detections or removal problems continue, use Windows recovery options and consider a clean installation from installation media. A clean installation removes data from the selected drive, so first determine what you need to preserve and how you will restore it. If the PC cannot use its recovery options, Microsoft’s recovery guidance explains creating installation media with another working PC and a USB drive.
Quick Recap
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
