October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
Redmond desk3 min

How to Run Microsoft Defender Offline on an Infected Windows PC

Microsoft Defender Offline scans Windows 10 and 11 after a restart, outside the normal Windows session. Here’s how to run it and what to do if malware persists.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

On Windows 10 and Windows 11, Microsoft Defender Offline scans your PC after a restart, outside the normal Windows session. That makes it useful when malware keeps returning or may be hiding while Windows is running. Save your work first; the scan restarts the computer. Open Windows Security > Virus & threat protection > Scan options, choose Microsoft Defender Antivirus (offline scan), then start the scan. Microsoft explains the scan and where to check its results.

What an offline virus scan does

Microsoft Defender Offline restarts the PC and runs from the Windows Recovery Environment rather than from your usual Windows session. Scanning outside the normal session can help when malware is difficult to detect or remove while Windows is running. “Offline” describes where the scan runs; it does not mean you need a separate paid antivirus product or a USB drive.

As an Amazon Associate I earn from qualifying purchases.

Microsoft describes Defender Offline as a quick scan, but it is not a guaranteed fix for every infection. If malware returns or Windows cannot recover normally, you may need to move on to broader recovery steps.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Run Microsoft Defender Offline

  1. Save open work. Starting the scan restarts the PC, so save documents and close anything you are working on.
  2. Open the scan settings. In Windows Security, go to Virus & threat protection > Scan options.
  3. Choose the offline scan. Select Microsoft Defender Antivirus (offline scan), then start the scan. Labels and available options can vary with Windows version or device configuration.
  4. Let the PC restart and scan. Defender Offline loads in the Windows Recovery Environment, runs the scan, then restarts the computer when it finishes.
  5. Review the result. Open Windows Security > Protection history to see detections and actions taken. See Microsoft’s guide to Virus & threat protection for scan and history details.

If the offline scan option is missing

First confirm you are looking in Windows Security > Virus & threat protection > Scan options. Microsoft notes that labels or options can differ by version or configuration. If the offline scan still is not listed, use the scan options available on your PC and consult Microsoft’s malware detection and removal troubleshooting guidance for the situation.

#1 Best Overall

Choose the next step if malware persists

Situation Next step Disruption and risk
Windows starts and you want a routine check Run a scan from Windows Security. Runs in the normal Windows session; it does not provide the outside-Windows scanning environment of Defender Offline.
Malware returns or may be hiding while Windows runs Run Microsoft Defender Offline. Requires a restart and saved work. It can help with persistent malware, but does not guarantee removal.
Problems continue, or normal recovery does not work Consider reinstalling Windows from installation media and selecting a clean installation. Review Microsoft’s Windows recovery options before proceeding. A clean installation removes data from the selected drive. Back up what you can and understand your recovery needs before starting.

When Windows will not start or recover

If the PC will not respond to its recovery options, Microsoft says you can create Windows installation media using another working PC and a USB drive. That is a fallback for Windows recovery or reinstallation—not a requirement for running Defender Offline. Before a clean installation, consider which files and settings you need to preserve and how you will restore them; the selected drive’s data can be erased. Microsoft’s recovery guidance covers the available routes.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Reduce the chance of a repeat detection

Keep Windows and Microsoft Defender security intelligence updated. If detection or removal problems continue, scan again and follow Microsoft’s troubleshooting steps for malware that returns or resists removal. Microsoft also recommends updating security intelligence and scanning when addressing persistent unwanted software; see Protect your PC from unwanted software.

Quick Recap

Bestseller No. 1
HP 14' HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
HP 14" HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
$245.99
Bestseller No. 2
Dell Latitude 5420 14' FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
256 GB SSD of storage.; Multitasking is easy with 16GB of RAM; Equipped with a blazing fast Core i5 2.00 GHz processor.
$285.00
Rank #3
15.6 Inch Win 11 Laptop Computer, N4020, 4GB DDR4 RAM, 128GB Storage
  • WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
  • 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
  • 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
  • CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
  • LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
Rank #2
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.