Start with Windows Security, run a Quick scan, and treat the result as a lead rather than a guarantee. If concern remains, update Defender security intelligence, run a Full scan, and use Microsoft Defender Offline when a detection returns or appears able to hide while Windows is running. Review Protection history and choose Remove or Quarantine for confirmed threats. Allow a file only when you trust both the file and its publisher.
The procedure below applies to the built-in security workflow on Windows 10 and Windows 11. Menu wording can differ slightly after updates. Symptoms such as sudden slowness, pop-ups, browser redirects, reduced battery life or unexpected data use justify checking, but none proves that malware is present.
As an Amazon Associate I earn from qualifying purchases.
What counts as a useful malware check?
A useful check combines the right scan with follow-up action. A Quick scan is an efficient first pass through common hiding places. A Full scan examines every file and program on the PC. A Custom scan checks only selected files or folders, and an Offline scan restarts the computer so Defender can inspect it outside the normal Windows session.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteNo single scan promises that a computer is clean. Some unwanted software can be missed, can reinstall itself, or can interfere with a scan while Windows is running. The practical approach is to begin with the least disruptive scan that fits your concern, then escalate when the result, symptoms or repeated detections warrant it.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Before you scan: check which protection is active
- Open Start, search for Windows Security, and open the app.
- Select Virus & threat protection.
- Look for the active antivirus provider. Microsoft Defender Antivirus is built into Windows 10 and Windows 11. If a compatible third-party antivirus is installed, Defender Antivirus may turn itself off automatically.
- Make sure some reputable real-time antivirus protection is active. A PC with neither Defender nor another active provider is exposed.
Do not deliberately run two real-time antivirus products at the same time. Microsoft warns that simultaneous products can reduce performance and can cause update or installation errors. A separate, on-demand scanner is different from a second real-time engine, but check its settings so it does not enable conflicting real-time protection.
Choose the right Windows scan
| Scan | What it checks | When to use it | Disruption and limits |
|---|---|---|---|
| Quick scan | Common locations where malware is often found | First check when you notice suspicious behavior | Fastest option, but it does not examine every file |
| Full scan | Every file and program on the device | After a clean Quick scan when concern remains, or after updating protection | Can take a long time, especially with large disks or archives |
| Custom scan | A file or folder that you select | When a download, USB drive, archive or project folder is specifically suspicious | Coverage is limited to the selected item |
| Microsoft Defender Offline | Scans in Windows Recovery Environment, before the normal Windows session is running | Recurring detections or malware that may hide or defend itself in Windows | Restarts the PC; save open work first |
How scan coverage changes your confidence
Think of each scan as answering a different question. A Quick scan asks whether malware is present in the locations it checks most often. A clean result lowers concern about those locations, but it says nothing definitive about files outside that scope. A Full scan asks a broader question by examining every file and program, so it is the appropriate next step when symptoms affect the whole PC or a Quick scan does not explain them.
A Custom scan is precise rather than comprehensive. It is useful when you have just downloaded a file, connected removable media or identified a particular folder, but a clean result applies only to that selection. Defender Offline changes the conditions of the test: Windows restarts into the Windows Recovery Environment before the regular session loads. That can prevent persistent malware from hiding behind startup software or defending an active file.
Large disks, numerous files and compressed archives can make a Full scan substantially slower. Plan to leave the computer powered on and avoid treating scan duration as evidence that something is wrong. The important distinction is coverage, not a race to finish.
How to run a Quick scan
- In Windows Security, open Virus & threat protection.
- Under the current threats section, select Quick scan.
- Let the scan finish. Avoid shutting down the PC or forcing the app closed while it is working.
- Read the result. If a threat is found, continue to Protection history and handle the detection as described below. If nothing is found but your concern remains, update security intelligence and run a Full scan.
A clean Quick scan means that no threat was found in the locations it checked; it does not mean every file on the computer was examined.
How to scan one file, folder or drive
Use a Custom scan when the concern is tied to a particular download, removable drive, archive or folder.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
- Open File Explorer and locate the item.
- Right-click the file or folder and choose Scan with Microsoft Defender.
- On Windows 11, you may need to choose Show more options first to reveal that command.
- Wait for the scan result and open Protection history if Windows reports a detection.
Scanning a selected item is useful for triage, but it is not a substitute for a Full or Offline scan when the whole PC may be affected.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Update protection and run a Full scan
Update Defender security intelligence first
Detection depends on current security intelligence. In Virus & threat protection, use the available protection-update option to check for the latest intelligence before starting the deeper scan. Keep cloud-delivered protection and automatic sample submission enabled when possible; Microsoft identifies both as support for detection and analysis.
Start the Full scan
- Return to Virus & threat protection.
- Select Scan options.
- Choose Full scan, then select Scan now.
- Leave the PC powered on until the scan completes. A large disk, many files or compressed archives can make it take substantially longer than a Quick scan.
- Review the result in the scan page and in Protection history.
A Full scan covers every file and program on the device, but it still cannot guarantee that an active or sophisticated threat is absent. If a detection returns, or Windows cannot remove it while running normally, use Offline scan.
Use Microsoft Defender Offline for recurring or persistent threats
Offline scan is the escalation step for a threat that keeps returning or may be hiding from security software during a normal Windows session. Windows restarts into the Windows Recovery Environment and scans before the regular desktop and most startup software load. That makes it harder for persistent malware to conceal itself or defend its files.
- Save all open documents and close your applications.
- Open Windows Security > Virus & threat protection.
- Select Scan options.
- Choose Microsoft Defender Antivirus (offline scan).
- Select Scan now and confirm the restart.
- Allow the computer to restart and complete the scan. Do not interrupt power during the process.
- After Windows starts again, return to Virus & threat protection > Protection history to see the result.
Save work before selecting this option because the restart is part of the scan. If the same detection appears again after Offline scan, consider whether the original source is still present: a malicious website, email attachment, downloaded installer or another component may be reinstalling it.
How to handle a detection in Protection history
Open Windows Security > Virus & threat protection > Protection history and select the alert to see its name, location and status. Read the details before choosing an action.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Remove
Remove deletes the detected file. Use it when the item is clearly malicious or unwanted and you do not need to preserve it for investigation or recovery.
Quarantine
Quarantine moves the item to a protected location and blocks it from running. It is the safer choice when you want to prevent execution while retaining the ability to review the alert or reverse the action if a legitimate file was misidentified.
Allow
Allow places the item on an allowed list so Windows Security will not block it in the same way. Choose this only when you trust the file, understand why it was flagged and can verify the publisher and source. Allowing a program merely because it is inconvenient to remove can restore the malware’s ability to run.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Protection history also shows quarantined items and threats that were previously allowed. If you suspect a mistaken detection, verify the publisher and obtain a clean copy from the publisher’s legitimate distribution channel rather than allowing an unknown executable.
What to do when Windows Defender keeps finding the same threat
- Choose Remove or Quarantine in Protection history; do not repeatedly allow the alert without identifying the file.
- Uninstall software you do not need, especially a recently installed program associated with the detection.
- Update Defender security intelligence.
- Run a Full scan.
- If the detection returns, run Microsoft Defender Offline.
- Think about what could be restoring it: a browser download, email attachment, removable drive, scheduled task, startup item or another infected device sharing files.
A recurring alert does not by itself identify the cause. It can mean that a component was not removed, that another component is reinstalling it, or that the same unsafe source is being opened again. Offline scanning is Microsoft’s recommended escalation for recurring detections.
Is the Malicious Software Removal Tool enough?
Microsoft’s Windows Malicious Software Removal Tool (MSRT) can help with certain prevalent active threats, but it is intentionally narrow. Microsoft states: “The tool removes only specific prevalent malicious software. Specific prevalent malicious software is a small subset of all the malicious software that exists today.”
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
That limitation means MSRT is not a replacement for real-time antivirus protection, current security intelligence, a Full scan or Defender Offline. Microsoft also identifies Defender Offline and Microsoft Safety Scanner as options for broader detection and removal. Treat those tools as targeted or on-demand assistance and follow the instructions shown for the particular Windows release.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →When symptoms point to something other than malware
Slow performance, pop-ups, redirects, battery drain and unexpected data use are useful reasons to check, but each has non-malware explanations. For example, a nearly full drive, a failing storage device, a browser extension, a background update, poor Wi-Fi or an unwanted but non-malicious application can produce similar behavior.
- Record what changed and when: a new application, extension, download, email attachment or Windows update.
- Check whether the symptom occurs in one browser or in every application.
- Review installed apps and browser extensions and remove items you do not recognize.
- Run the appropriate Defender scan rather than diagnosing from the symptom alone.
- If scans are clean but the problem continues, investigate hardware, storage space, updates, drivers and browser settings.
This avoids two common errors: assuming every slowdown is an infection and dismissing a real infection because one Quick scan was clean.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Match the response to the situation
Use the least disruptive action that answers the immediate question, then broaden the check when the evidence warrants it.
- You opened a suspicious download: scan that file or its containing folder from File Explorer, then run a Quick scan. If the source is untrusted or symptoms continue, update security intelligence and run a Full scan.
- You connected a questionable USB drive: use a Custom scan on the drive before opening files. A clean selected-item result does not replace a broader scan if you used the drive extensively.
- You see a single alert: inspect its location and status in Protection history, then Remove or Quarantine it. Do not use Allow merely to stop notifications.
- The alert returns: update protection, complete a Full scan and use Defender Offline if it returns again.
- Several symptoms appear but scans are clean: check extensions, installed software, storage and updates instead of assuming the symptoms prove infection.
Recovery when malware has caused serious damage
If malware has made irreversible changes, Microsoft says resetting the PC may be appropriate. A reset can remove applications and settings and may require restoring personal data, so treat it as a recovery decision rather than a routine scan step.
Choose a trustworthy restore point
- Prefer backups created before the infection.
- Use an external backup or a cloud location with version history when available.
- Do not assume a backup stored only on the infected PC is clean; malware may have modified it too.
- Before copying files back, scan the backup or restore only files you can identify and need.
After resetting or restoring
- Install all available Windows updates.
- Update applications, browsers, drivers and security software.
- Change passwords from a device you trust, particularly if the infected PC was used for email, banking or administrator accounts.
- Re-enable appropriate security settings and confirm that one real-time antivirus provider is active.
- Restore data selectively and monitor Protection history for new detections.
Updating Windows and applications after recovery reduces exposure to vulnerabilities that malware may have used in the first place.
Practical escalation checklist
- One suspicious symptom, no alert: run a Quick scan, then a Full scan if concern remains.
- One suspicious file or folder: use File Explorer’s Defender scan, then investigate the source and run a broader scan if needed.
- A confirmed detection: review Protection history and choose Remove or Quarantine.
- A detection that returns: update security intelligence, run a Full scan, then Microsoft Defender Offline.
- Severe or irreversible damage: preserve clean backups, consider a PC reset and restore cautiously.
- No detection but continuing symptoms: investigate browser extensions, unwanted applications, storage, hardware and updates instead of assuming malware.
Common mistakes to avoid
- Stopping after a clean Quick scan when the concern involves the whole computer.
- Running two real-time antivirus products simultaneously.
- Allowing a detection without verifying the file and publisher.
- Starting Offline scan without saving open work.
- Restoring every local backup without considering that it may have been altered.
- Assuming MSRT covers all malware.
- Ignoring the original source of a recurring infection, such as an unsafe download or attachment.
Frequently Asked Questions
How do I check my Windows PC for malware?
Open Windows Security, select Virus & threat protection, and run a Quick scan. If concern remains, update Defender security intelligence and run a Full scan. Use Protection history to review any detection.
Is a clean Quick scan proof that my PC is safe?
No. A Quick scan checks common hiding places, not every file. A Full scan examines every file and program, while Defender Offline is intended for threats that may hide during a normal Windows session.
Should I choose Remove or Quarantine?
Remove deletes the detected file. Quarantine moves it to a protected location and blocks it from running, making it the safer choice when you need to review the alert or are unsure whether the file was misidentified.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsWhen should I use Microsoft Defender Offline?
Use it when the same threat keeps returning or Windows cannot remove it during normal operation. Save your work first because the PC restarts into the Windows Recovery Environment.
Can I run two antivirus programs together?
Do not run two real-time antivirus products simultaneously. Microsoft warns that this can hurt performance and cause update or installation errors. A separate on-demand scanner is different if it does not enable conflicting real-time protection.
Is the Malicious Software Removal Tool a complete antivirus?
No. MSRT targets only specific prevalent threats, which are a small subset of all malware. It does not replace current security intelligence, real-time protection, a Full scan or Defender Offline.
What if the scans are clean but my computer is still slow?
Treat symptoms as clues rather than proof. Check storage space, hardware, updates, browser extensions and unwanted applications, and note whether the issue affects one browser or every application.
Recommended Free Tools
What should I do if malware damaged the PC?
If changes are irreversible, a PC reset may be appropriate. Restore from a backup made before infection, preferably external or cloud-based with version history, then update Windows and applications before restoring data selectively.
The Bottom Line
Run Quick scan first, then update protection and use Full scan for broader coverage. Handle detections with Remove or Quarantine, reserve Allow for files and publishers you can verify, and use Defender Offline when threats recur. If damage is severe, reset cautiously and restore only from a trustworthy pre-infection backup.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
