What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Real-time protection, firewall protection, and on-demand scans defend different parts of a Windows PC. Real-time protection watches files and activity as they are downloaded, opened, or run. A firewall controls network connections. An on-demand scan is a check you start yourself, ranging from one file to the entire device. They complement one another; none is a replacement for the others.
The difference at a glance
| Protection | What it examines | When it acts | Typical scope | What you do |
|---|---|---|---|---|
| Real-time protection | Files and activity as items are downloaded, opened, or run | Continuously while enabled | Current file activity and related behavior | Keep it enabled; temporarily change its setting only when necessary |
| Firewall protection | Inbound and outbound network traffic and connection attempts | As connections are evaluated | Network profiles, applications, ports, addresses, and rules | Choose the correct network profile and allow specific apps when required |
| On-demand scan | Files and programs selected for inspection | When you start or schedule it | One item, common hiding places, selected folders, or all storage | Choose quick, full, custom, or offline scanning based on the situation |
The simplest mental model is activity, connections, and storage. Real-time protection monitors activity, the firewall filters connections, and an on-demand scan examines stored content at a chosen moment. Microsoft documents these functions in the Windows Security app on Windows 10 and Windows 11.
As an Amazon Associate I earn from qualifying purchases.
What real-time protection does
Real-time protection is the always-on antivirus layer. Windows Security checks downloads and items when you open or run them, so a suspicious file can be identified before it has a chance to execute normally. It is designed to operate without waiting for you to remember to launch a scan.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhat it watches
- Files arriving through downloads, removable media, or other transfers.
- Items opened from File Explorer or another application.
- Programs and scripts that are launched.
The exact detections and responses depend on Microsoft Defender Antivirus definitions, cloud services, Windows version, and device policy. “Real-time” does not mean that every threat is guaranteed to be detected. If a file behaves unusually or you remain concerned after an alert, Microsoft still recommends running an appropriate manual scan.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Where to check or change it
- Open Windows Security.
- Select Virus & threat protection.
- Under Virus & threat protection settings, select Manage settings.
- Review the Real-time protection switch.
When you temporarily turn the switch off, files you open or download are not scanned by that layer during the interruption. Microsoft says Windows turns the setting back on automatically after a short time. Device-management policies or another antivirus product can prevent you from changing it.
What firewall protection does
Windows Firewall is a network traffic filter. It evaluates connection attempts and applies rules based on details such as the application path, port, IP address, and network profile. Its purpose is to block unauthorized access and control which programs may communicate; it is not a file scanner.
Network profiles matter
Windows uses three profiles:
- Domain: normally used when a business-managed PC is connected to its organization’s domain.
- Private: intended for a trusted home or small-office network.
- Public: intended for places such as cafés, airports, hotels, and other networks where nearby devices are not trusted.
A public profile generally applies stricter sharing and inbound-connection rules than a trusted private network. Selecting a profile does not replace individual firewall rules; it determines which set of rules applies while you are connected.
Recommended Free Tools
When an app is blocked
If a program cannot connect, do not switch the firewall off as a first response. In Windows Security > Firewall & network protection, use the option to allow an app through the firewall and permit only the required application on the appropriate profile. Organization-managed computers may lock these controls, in which case an administrator must change the rule.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
A firewall can stop an unauthorized remote connection while a malicious file remains on disk, and real-time antivirus can detect a malicious file even when no network connection is involved. That is why the two controls address different failure modes.
What an on-demand scan does
An on-demand scan is a point-in-time inspection that you initiate. It supplements continuous protection rather than replacing it. Windows Security offers four relevant choices, each trading depth, time, and interruption differently.
Quick scan
A quick scan checks locations where malware commonly hides. It is the practical first check after a suspicious download, an unexpected alert, or a brief concern. Because it does not inspect every file, a clean quick scan does not establish that every file on the device is clean.
Full scan
A full scan checks every file and program on the device. It provides broader coverage when concern remains after a quick scan, but it can take considerably longer and may use system resources while it runs. Leave the computer powered on and avoid treating the device as fully checked until the scan completes.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Custom scan
A custom scan limits inspection to locations you select. Use it when you know where a suspicious download, extracted archive, project folder, or removable drive is located. It is faster than a full scan when the scope is well defined, but it cannot find a separate threat outside the selected locations.
Microsoft Defender Offline scan
Defender Offline restarts the computer and scans before normal Windows loads. Running outside the usual Windows session can make it harder for persistent malware to hide or interfere with the scan. Save open work first: the restart interrupts applications, and you should not depend on unsaved data surviving it.
Scan one item from File Explorer
For a single suspicious file or folder, right-click it in File Explorer and choose Scan with Microsoft Defender. On Windows 11, the command may be inside Show more options. This targeted check is useful for an attachment, installer, archive, or USB folder without scanning unrelated storage.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteHow the three layers work together
Consider a downloaded installer. Real-time protection can inspect it when it arrives or when you launch it. If the installer attempts to contact a server, firewall rules govern that connection. You can then run a custom scan on the download folder or a full scan if you suspect other files were affected. Each layer answers a different question:
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
- Real-time protection: “Is this file or activity suspicious right now?”
- Firewall: “Should this connection be permitted on this network?”
- On-demand scan: “What suspicious content is present in the locations I ask Windows to inspect?”
A firewall cannot substitute for antivirus scanning, and a manual scan cannot provide continuous monitoring between scans. Disabling one layer therefore creates a gap rather than simplifying the security setup.
Step-by-step: verify which antivirus is active
- Open Windows Security from the Start menu.
- Open Virus & threat protection.
- Select Manage providers.
- Check which antivirus provider is listed as active and which product supplies real-time protection.
When another antivirus product is installed and active, Microsoft Defender Antivirus may enter disabled mode automatically. Do not assume that seeing the Windows Security interface means Defender’s real-time engine is the active one. Microsoft warns that running two real-time antivirus products concurrently can hurt performance or create errors. On-demand scanners can coexist because they run only when requested or scheduled.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Step-by-step: run the right scan
For a quick immediate check
- Open Windows Security.
- Select Virus & threat protection.
- Select Quick scan.
- Review the result and follow any remediation prompt before opening the suspected item again.
For a broader investigation
- Open Virus & threat protection.
- Select Scan options.
- Choose Full scan, Custom scan, or Microsoft Defender Offline scan.
- Start the scan and keep the device available until it reports completion. Save work before selecting Offline.
For one file or folder
- Open File Explorer and locate the item.
- Right-click it.
- On Windows 11, select Show more options if the security command is not visible.
- Select Scan with Microsoft Defender.
Which protection to use in common situations
| Situation | Best first action | Why |
|---|---|---|
| A newly downloaded attachment or installer looks suspicious | Right-click the item and run a custom item scan | It checks the specific object before you open it |
| You noticed unusual behavior but have no single suspect file | Run a quick scan, then a full scan if concern remains | The first pass checks common hiding places; the second broadens coverage |
| You suspect persistent malware that may interfere with Windows | Use Microsoft Defender Offline | The scan runs after a restart, outside the normal Windows session |
| An application cannot reach its service | Review the firewall rule and network profile | The symptom concerns a connection, not necessarily a malware infection |
| You are on café or hotel Wi-Fi | Use the public network profile and keep the firewall enabled | Other devices on the network are less trusted |
Common mistakes and how to recover
Confusing a firewall alert with an antivirus alert
A firewall prompt concerns a network connection. An antivirus alert concerns a file, program, or behavior. Read which component generated the notification before deciding what to change; allowing a network connection will not make a file safe.
Turning off the firewall to fix one blocked app
Allow the specific application through the firewall on the needed profile instead. Disabling the entire firewall removes protection for unrelated services and applications.
Assuming a quick scan proves the device is clean
Quick scans focus on common hiding places. If symptoms continue or the initial concern is serious, select Full scan or Defender Offline rather than repeating quick scans indefinitely.
Running two real-time antivirus engines
Check Manage providers and leave one real-time antivirus engine in charge. Microsoft cautions that concurrent real-time products can create errors or degrade performance; an on-demand scan is the safer way to obtain a second check.
Trying to change a setting that is locked
Work, school, and other managed devices can enforce antivirus and firewall settings by policy. A missing toggle or disabled control may be intentional. Contact the administrator rather than attempting to bypass the policy.
Scanning without saving work
Most scans run in the current Windows session, but Defender Offline restarts the computer. Save documents and close applications before starting it.
Windows 10 and Windows 11 scope
The menus and labels described here apply to Microsoft’s Windows Security guidance for Windows 10 and Windows 11, but they can vary by release, device policy, and whether another antivirus provider is active. Microsoft states that Windows 10 support ended on October 14, 2025; do not interpret these instructions as a promise of continuing standard Windows 10 security fixes. A supported Windows edition, current updates, and an active security provider are separate questions from whether a particular scan command appears in the interface.
The practical rule
Keep real-time protection enabled to monitor file activity, keep the firewall enabled to control network connections, and start an on-demand scan whenever the situation calls for a deliberate check. Use a quick scan for an immediate first look, a custom scan when the suspect location is known, a full scan for broad coverage, and Defender Offline when persistent malware may be interfering with normal Windows. Confirm the active antivirus provider before troubleshooting, and change the narrowest setting needed instead of disabling an entire protection layer.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
