Microsoft Defender Offline
Microsoft Defender Offline: A free Windows scanner for persistent malware, rootkits, and offline remediation. Ranked #1 of 30 in Malware Removal Software by our editors (9.4/10); pricing: Free plan; best for free Windows offline remediation.
At a glance
- Editor score9.4 / 10
- PricingFree plan
- Best forFree Windows offline remediation
- Free planYes
- Paid fromFree
- Bootable rescue mediaYes
- Founded1975 · Redmond, Washington, United States
- Facts checked23 Sep 2026
Where it wins
- Scans outside normal Windows to target persistent malware and rootkits
- Offers quick, full, custom, quarantine, and removal controls
- Supports Windows Security, PowerShell, WMI, and bootable media
Where it doesn't
- Windows-only platform support
- Offline scans restart the device automatically
- Bootable media applies to older supported Windows versions
Our verdict on Microsoft Defender Offline
Microsoft Defender Offline is an on-demand malware scanner integrated into Windows Security. It is designed for Windows users who need to scan outside the normal operating environment, particularly when persistent malware or rootkits may be difficult to address during a standard Windows session. The workflow uses the Windows Recovery Environment and automatically restarts the device when the scan completes, with results available in Protection history.
The product is free and is delivered as a Windows feature rather than a separately priced standalone application. Windows Security provides quick, full, and custom scan options, along with threat quarantine and removal controls. A quick scan is intended for persistent malware and rootkits, while the offline workflow adds a remediation path outside the regular operating system. Administrators can launch the scan through Windows Security, PowerShell, or Windows Management Instrumentation, giving it a useful fit for managed Windows operations. Older supported Windows versions can also use Microsoft-provided bootable USB, CD, or DVD media.
Its main boundary is platform scope: Microsoft Defender Offline is for Windows devices, not a cross-platform malware removal tool. The automatic restart is part of the workflow, so it requires an appropriate point in the user's work schedule. The bootable-media option is also oriented toward older supported Windows versions, while Windows 10 and Windows 11 generally use the built-in Windows Security and Windows Recovery Environment process. Choose it for free offline remediation on Windows; choose another category option if you need broader operating-system coverage or a separately packaged standalone application.
Your product? Our editors can test Microsoft Defender Offline in depth and publish a review, labelled as paid · from $149/mo →
Microsoft Defender Offline pricing
Microsoft Defender Offline fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Scan modes | Offline |
| Threat quarantine | Yes |
| Bootable rescue media | Yes |
| Scheduled scans | Not verified |
| Operating systems | Windows |
| Remediation automation | Automatic |
| Deployment | Desktop |
| Platforms | Windows |
| Support | Docs, Community |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | support.microsoft.com |
| Facts checked | 23 Sep 2026 |
Alternatives to Microsoft Defender Offline
- ESET Online ScannerA straightforward free scanner for periodic Windows malware checks and removal.9.2
- Kaspersky Virus Removal ToolA focused free scanner for deep manual disinfection, not continuous protection.9.1
- Dr.Web LiveDiskA free recovery environment for scanning, isolating, and restoring malware-affected systems.9.0
See all Microsoft Defender Offline alternatives →
Microsoft Defender Offline vs the competition
- Microsoft Defender Offline vs ESET Online Scanner
- Microsoft Defender Offline vs Kaspersky Virus Removal Tool
- Microsoft Defender Offline vs Dr.Web LiveDisk
- Microsoft Defender Offline vs Comodo Rescue Disk
- Microsoft Defender Offline vs Emsisoft Emergency Kit
- Microsoft Defender Offline vs Adlice Protect
Compare Microsoft Defender Offline with any tool side by side →
Used Microsoft Defender Offline? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Microsoft Defender Offline for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Microsoft Defender Offline is listed in our Malware Removal Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/microsoft-defender-offline/"><img src="https://www.itechguides.com/best/badge/microsoft-defender-offline.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update