Remove Malware Using Microsoft Defender Offline Scan
In addition to Quick, Full and Custom Scans, Windows Security provides the option to use Microsoft Defender in offline mode to remove malware from computers. The offline scan is specifically designed to remove hard-to-detect and persistent types of viruses or malware from a Windows computer. Certain types of malware (NTRootkit, Fame, Machiavelli and other types of Rootkit viruses) have the ability to bypass Windows Shell and avoid being detected during regular Malware Scans. When Windows Security is used in Offline Mode, it scans the computer from outside Windows Kernel, which allows it to target Rootkit and other types of viruses, trying to infect or overwrite master boot record.
Remove Malware Using Microsoft Defender Offline Scan
Follow the steps below to remove malware from on your computer using Microsoft Defender in offline mode.
Go to Settings > Update & security > select Windows Security in the left-pane and click on Virus & Threat Protection in the right-pane.
On the next screen, click on Scan Options.
On the next screen, select Microsoft Defender Offline scan option and click on Scan now.
On the pop-up, click on the Scan button to start the Offline Scan.
Once you click on the Scan button, your computer will restart and boot in special offline scan mode. When the Offline Scan is completed (10 to 15 minutes), your computer will restart again. This time Windows 10 operating system will be loaded and you will see the regular Windows Login Screen.
Examine Offline Scan Results
Once your computer restarts, you can take a look at what was removed during Microsoft Defender Offline scan by clicking on Protection History link located below the scan summary.
On the next screen, you will see a listing of malware detected or removed during the Malware Scan on your computer.
How to Block and Unblock Programs in Windows Firewall How to Remove Bloatware From Windows 10 PC
