How to Scan for Malware in Windows 11 with Defender

Why Scan Manually?

Running a manual scan for malware Windows 11 lets you check specific files, folders, or hard drives right away instead of waiting for scheduled background checks. You should run a manual scan if you downloaded an unverified file from the internet, plugged in an unknown USB drive, or notice your PC acting strangely.

Option 1The Fastest Way – Right-Click Scan

Scanning a single file or folder takes just a few clicks using the built-in context menu 🖱️. This method lets you target suspicious downloads instantly without opening a full security dashboard, making it the fastest way to check individual items on your storage drives.

• Find what you want to scan. Go to your Desktop or open File Explorer 📁. You can press the Win+E to open it quickly. Find the file, folder, or drive you want to check.
• Right-click on 🖱️ it. A menu will pop up. If you’re using Windows 11, you might need to click “Show more options” to see the full menu.
• Select “Scan with Microsoft Defender”. This option will show up in the menu. Click it!
• See the results. Windows Security will open automatically and show you how the scan is going. If Defender finds anything suspicious, it will tell you and give you choices on what to do. You can often click “See details” to learn more about any problems found.

Good tip: This is perfect for checking files you just downloaded or suspicious email attachments before you open them. Just remember to right-click and scan!

Option 2Using the Windows Security App

The Windows Security app gives you full control over how to scan for malware Windows 11, offering quick checks, deep system-wide scans, and offline virus removal. Open this built-in control panel 🎛️ whenever you need to check your entire computer or adjust your virus protection settings.

• Open Windows Security. You can usually find this by typing "Windows Security" in the Start menu search and clicking the app.
• Go to "Virus & threat protection". Look for this option in the menu on the left side or on the main screen of Windows Security.
• Find the "Scan options". Under the "Current threats" area, you should see a link that says "Scan options". Click it.
• Choose your scan type. You have a few choices:
  • Quick scan: This checks the most common places where bad software hides. It's fast and usually a good first step.
  • Full scan: This checks every file and program running on your computer. It can take a long time, so it's best to do it when you don't need your computer for a while.
  • Custom scan: This lets you pick specific files, folders, or drives to scan.
  • Microsoft Defender Offline scan: This is a strong scan that runs after your computer restarts, before Windows completely starts up. It's good for finding hidden problems.
• Click the "Scan now" button.

For Custom Scans:

• Select what to check. If you chose Custom scan, a new window will open. Look through your folders and drives to pick exactly what you want Defender to check, then click "Select Folder".

Deal with any problems. Similar to the right-click method, if Defender finds anything, it will show you the results and let you take action. You can click "See details" for more information.

Be careful: A Full scan can take a very long time, sometimes hours, depending on how much stuff you have on your computer. Make sure you have enough time and your computer is plugged in before starting one.

Option 3Using the Command Prompt (For Those Who Like Typing Commands!)

Command Prompt lets you run text-based security scans using the built-in tool called MpCmdRun.exe. This method works well if you prefer using the keyboard or need to run virus checks through scripts and automated administrative tasks.

Open Windows Terminal as an administrator. Search for "Windows Terminal" in your Start menu. Right-click on it and choose "Run as administrator". This gives the command prompt the needed permissions. This step requires administrator rights.

Choose your command. Here are some common commands you can use. Copy and paste them into the terminal window, then press Enter.

• To update definitions and run a Quick Scan:
  

  "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate & "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Scan -ScanType 1

• To run just a Quick Scan:
  

  "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Scan -ScanType 1

• To run a Full Scan:
  

  "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Scan -ScanType 2

• To run a Custom Scan on a specific file or folder: You need to replace "Full Path" with the actual path to what you want to scan. For example, to scan your Downloads folder, you'd type:
  

  "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Scan -ScanType 3 -File "C:\Users\YourUsername\Downloads"

  
  Important: Make sure to replace "YourUsername" with your actual Windows username.
  

Check for notifications. If Defender finds any problems, you'll usually get a notification from Windows Security. You can click on it to see the details and take action.

Pay attention: Typing commands can be tricky! Make sure you copy and paste them exactly as shown, paying close attention to quotation marks and spaces. A small mistake can stop the command from working.

Option 4Using PowerShell (Another Command-Line Option)

PowerShell provides administrative cmdlets like Start-MpScan to trigger security checks directly from the command line. This option suits advanced users who manage multiple machines or prefer modern scripting environments over the older Command Prompt.

Open Windows Terminal with PowerShell. Search for "Windows Terminal" in your Start menu. When it opens, make sure you are in the PowerShell tab. If not, click the arrow pointing down next to the plus sign and select "Windows PowerShell".

Enter your PowerShell command. Similar to the Command Prompt, you'll copy and paste commands here. Here are some examples:

• To update definitions and run a Quick Scan:
  

  Update-MpSignature; Start-MpScan -ScanType QuickScan

• To run just a Quick Scan:
  

  Start-MpScan -ScanType QuickScan

• To run a Full Scan:
  

  Start-MpScan -ScanType FullScan

• To run a Custom Scan: You'll need to replace "Full Path" with the exact location you want to scan. For instance, to scan your Documents folder:
  

  Start-MpScan -ScanType CustomScan -ScanPath "C:\Users\YourUsername\Documents"

  
  Remember to swap out "YourUsername" with your actual username.
  

Watch for problems. Any problems found will usually trigger a notification from Windows Security, guiding you on what to do next.

Be very careful when typing or pasting them. If a command doesn't work, double-check for any mistakes.

Summary

Manual malware scans give you direct control over your computer's safety whenever automatic background checks are not enough. You can choose between the quick right-click menu, the visual Windows Security dashboard, or command-line tools depending on your workflow.