The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →To use Windows 11’s built-in antivirus, open Windows Security from Start, select Virus & threat protection, and check Current threats for the last scan and any detections. For an immediate check, run a Quick scan. For a deeper check, use Scan options. Keep Real-time protection turned on during ordinary use.
Confirm you are using the right product
Windows 11 includes an antivirus feature called Microsoft Defender Antivirus. You manage it through Windows Security, the built-in app and settings surface. Microsoft also uses the name “Microsoft Defender” for a separate app included with some Microsoft 365 Personal and Family subscriptions. That subscription app is not what this guide covers. If you are looking for the antivirus that ships with Windows, Windows Security is the place to go.
As an Amazon Associate I earn from qualifying purchases.
Check that protection is active
- Open Start, type Windows Security, and open the app.
- Select Virus & threat protection.
- Review Current threats. This section shows any detected threats, when the last scan ran, how long it took, the number of files scanned, quarantined threats, and threats you have allowed.
If the page shows a notice about a different antivirus provider, Windows is not using Microsoft Defender Antivirus at that moment. Installing a third-party antivirus product can switch the active provider, and the Windows Security page then reflects that product instead.
Run a scan
Microsoft offers four scan types. Quick scan is the fastest option and is the recommended first step when you suspect malware. Windows Security also scans automatically on its own schedule, so a quick scan is an extra check you can run whenever you want one.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
- In Windows Security, go to Virus & threat protection and select Quick scan.
- For a more thorough check, select Scan options, then choose Full scan, Custom scan, or Microsoft Defender Antivirus (offline scan).
- For a custom scan, select only the files and folders you want checked.
- For an offline scan, save all open work first. The device restarts, runs the scan in the Windows Recovery Environment, and restarts again when the scan finishes.
- When the scan completes, review the results in Protection history.
| Scan type | What it checks | Disruption | Best used for |
|---|---|---|---|
| Quick scan | Areas where malware most often runs | Runs during your normal Windows session | A fast first check when you suspect malware |
| Full scan | Every file and program on the device | Runs during your normal Windows session | A thorough check when a quick scan is not enough |
| Custom scan | Only the files and folders you select | Runs during your normal Windows session | Checking a downloaded file, a USB drive, or a specific folder |
| Offline scan | The device, scanned from the Windows Recovery Environment | Restarts the device before and after the scan | Persistent malware that may hide or defend itself while Windows is running |
Microsoft does not state how long any scan type takes, so expect the duration to vary with the amount of data on the device.
Read the results
Detections and actions appear in Protection history. Quarantined items are isolated and can be removed or restored. Threats you have allowed are a separate category. If you allowed a threat by mistake, select Don’t allow so Defender acts on it the next time it encounters it.
A clean result means the scan found nothing it recognized. It does not guarantee the computer is free of all malware, which is why a full or offline scan is the next step when you still have concerns.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Settings that affect day-to-day protection
Select Manage settings under Virus & threat protection settings to review the controls below.
Real-time protection
Real-time protection monitors files and programs as they are accessed or run. Keep it on during normal use. While it is off, files you open or download are not scanned at that moment. Microsoft says the setting turns back on automatically after a short period, and scheduled scans continue to run in the meantime. A brief toggle-off is a troubleshooting step, not a routine maintenance task.
Cloud-delivered protection and automatic sample submission
Cloud-delivered protection receives updated improvements while the device is online. When it is enabled, automatic sample submission can send suspicious files to Microsoft for evaluation. Microsoft says it alerts you if a requested file appears to contain personal information so you can decide whether to send it.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Tamper protection
Tamper protection helps stop malicious apps from changing important Defender settings, including real-time and cloud-delivered protection. An administrator can still change these settings in Windows Security, but other apps cannot while tamper protection is on.
Exclusions
Under Manage settings, select Add or remove exclusions to exclude a file, folder, file type, or process. Microsoft’s documentation states: “Exclusions only apply to real-time scanning with Microsoft Defender Antivirus.” An excluded item is not checked in real-time scanning, so it leaves the device more exposed. Scheduled Defender scans and third-party antimalware may still scan excluded items. Use the narrowest exclusion you need and remove it when it is no longer required.
Controlled folder access
Controlled folder access blocks unknown or untrusted apps from changing protected folders. When the feature is enabled, common folders are protected by default. You can add folders and allow specific trusted apps. This is an additional safeguard against ransomware, not a replacement for keeping backups of important files.
Rank #4
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Managed devices
On a work or school device, your organization may restrict some of these pages or controls. If a setting is greyed out or missing, the administrator has likely locked it, and changes need to go through your IT department.
Related protections in Windows Security
Windows Security includes protection areas beyond antivirus scanning. Firewall & network protection shows the firewall status and settings for domain, private, and public networks. App & browser control contains SmartScreen and potentially unwanted app settings. Microsoft says blocking of potentially unwanted app downloads works only with Microsoft Edge, while app blocking can detect unwanted apps that are already downloaded or installed. These features do different jobs from the scan types above, so check them separately.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Microsoft Support’s pages on Windows Security, virus and threat protection, and the firewall and network protection pages describe these controls. Those pages are the best place to check the current labels if a menu looks different on your build.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
