How to Run Windows Defender Offline

Windows Defender Offline is a specialized tool that detects and removes persistent malware such as rootkits. Windows Defender Offline is used in the event that Windows Defender or Microsoft Security Essentials detects an anomaly that...

Method 1 of 4:

Go to the Windows Defender Security Center.
Click on Virus & Threat Protection.
Click "Advanced scan".
Click the radio button for Windows Defender Offline, then click Scan now. Your PC will boot off of the Windows Defender Offline media in the Windows RE tools.
Check the scan results in the window that pops up upon login.

Method 2 of 4:

Go to Settings > Update and Security > Windows Defender.
Click on the "Scan offline" button. Your PC will restart and boot off of the Windows Defender Offline media in the Windows RE tools.
Check the scan results in the window that pops up upon login.

Method 3 of 4:

Launch Windows Defender.
Click on the orange "Download & Run" on the screen that says that your PC needs additional cleaning. Your PC will restart and boot off of the Windows Defender Offline media in the Windows RE tools.
Check the scan results in the window that pops up upon login.

Method 4 of 4:

Download the Windows Defender media creation tool on a PC that does not have the malware (32-bit direct link 64-bit direct link).
Insert a blank flash drive formatted to FAT, not exFAT or NTFS. Then follow the prompts on screen to create the Windows Defender media.
Turn off the infected computer, and insert the Windows Defender media into the computer.
Boot into the BIOS, where you will have to change the boot order.
Exit the BIOS, and restart your computer. The Windows Defender media should run off of the USB drive, and should fully scan your computer.
When the scan completes, boot back into the BIOS, and change the boot order back to normal. Otherwise, you will be stuck booting to the USB drive.
Remove the USB drive. Check the scan results in the window that pops up upon login.