How to Run Windows Defender Offline

This updated guide examines How to Run Windows Defender Offline and organizes the essential facts, background, and practical takeaways in clear American English.

Method 1of 4:

Windows 10 Creators Update and Later

1. Go to the Windows Defender Security Center.
2. Click on Virus & Threat Protection.
3. Click "Advanced scan".
4. Click the radio button for Windows Defender Offline, then click Scan now. Your PC will boot off of the Windows Defender Offline media in the Windows RE tools.
5. Check the scan results in the window that pops up upon login.

Method 2of 4:

Windows 8 to Windows 10 Anniversary Update

1. Go to Settings > Update and Security > Windows Defender.
2. Click on the "Scan offline" button. Your PC will restart and boot off of the Windows Defender Offline media in the Windows RE tools.
3. Check the scan results in the window that pops up upon login.

Method 3of 4:

Windows 8 to Windows 10 Anniversary Update (Alternative method)

1. Launch Windows Defender.
2. Click on the orange "Download & Run" on the screen that says that your PC needs additional cleaning. Your PC will restart and boot off of the Windows Defender Offline media in the Windows RE tools.
3. Check the scan results in the window that pops up upon login.

Method 4of 4:

Windows 7 and Earlier

1. Download the Windows Defender media creation tool on a PC that does not have the malware (32-bit direct link64-bit direct link).
2. Insert a blank flash drive formatted to FAT, not exFAT or NTFS. Then follow the prompts on screen to create the Windows Defender media.
3. Turn off the infected computer, and insert the Windows Defender media into the computer.
4. Boot into the BIOS, where you will have to change the boot order.
5. Exit the BIOS, and restart your computer. The Windows Defender media should run off of the USB drive, and should fully scan your computer.
6. When the scan completes, boot back into the BIOS, and change the boot order back to normal. Otherwise, you will be stuck booting to the USB drive.
7. Remove the USB drive. Check the scan results in the window that pops up upon login.