Menu
-->
Applies to:
Use Microsoft Intune to configure scanning options
See Configure device restriction settings in Microsoft Intune and Windows Defender Antivirus device restriction settings for Windows 10 in Intune for more details.
Use Configuration Manager to configure scanning options:
See How to create and deploy antimalware policies: Scan settings for details on configuring System Center Configuration Manager (current branch).
Use Group Policy to configure scanning options
To configure the Group Policy settings described in the following table:
- On your Group Policy management computer, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.
- In the Group Policy Management Editor go to Computer configuration and click Administrative templates.
- Expand the tree to Windows components > Windows Defender Antivirus and then the Location specified in the table below.
- Double-click the policy Setting as specified in the table below, and set the option to your desired configuration. Click OK, and repeat for any other settings.
Description | Location and setting | Default setting (if not configured) | PowerShell Set-MpPreference parameter or WMI property for MSFT_MpPreference class |
---|---|---|---|
See Email scanning limitations) below | Scan > Turn on e-mail scanning | Disabled | -DisableEmailScanning |
Scan reparse points | Scan > Turn on reparse point scanning | Disabled | Not available |
Scan mapped network drives | Scan > Run full scan on mapped network drives | Disabled | -DisableScanningMappedNetworkDrivesForFullScan |
Scan archive files (such as .zip or .rar files). The extensions exclusion list will take precedence over this setting. | Scan > Scan archive files | Enabled | -DisableArchiveScanning |
Scan files on the network | Scan > Scan network files | Disabled | -DisableScanningNetworkFiles |
Scan packed executables | Scan > Scan packed executables | Enabled | Not available |
Scan removable drives during full scans only | Scan > Scan removable drives | Disabled | -DisableRemovableDriveScanning |
Specify the level of subfolders within an archive folder to scan | Scan > Specify the maximum depth to scan archive files | 0 | Not available |
Specify the maximum CPU load (as a percentage) during a scan. Note: This is not a hard limit but rather a guidance for the scanning engine to not exceed this maximum on average. | Scan > Specify the maximum percentage of CPU utilization during a scan | 50 | -ScanAvgCPULoadFactor |
Specify the maximum size (in kilobytes) of archive files that should be scanned. The default, 0, applies no limit | Scan > Specify the maximum size of archive files to be scanned | No limit | Not available |
Configure low CPU priority for scheduled scans | Scan > Configure low CPU priority for scheduled scans | Disabled | Not available |
Note
If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives.
Use PowerShell to configure scanning options
See Manage Windows Defender Antivirus with PowerShell cmdlets and Defender cmdlets for more information on how to use PowerShell with Windows Defender Antivirus.
Use WMI to configure scanning options
For using WMI classes, see Windows Defender WMIv2 APIs.
Email scanning limitations
We recommend using always-on real-time protection to protect against email-based malware.
Always-on protection scans emails as they arrive and as they are manipulated, just like normal files in the operating system. This provides the strongest form of protection and is the recommended setting for scanning emails.
You can also use this Group Policy to enable scanning of older email files used by Outlook 2003 and older during on-demand and scheduled scans. Embedded objects within an email file (such as attachments and archived files) are also scanned. The following file format types can be scanned and remediated:
- DBX
- MBX
- MIME
PST files used by Outlook 2003 or older (where the archive type is set to non-unicode) can also be scanned, but Windows Defender cannot remediate threats detected inside PST files. This is another reason why we recommend using always-on real-time protection to protect against email-based malware.
If Windows Defender Antivirus detects a threat inside an email, it will show you the following information to assist you in identifying the compromised email, so you can remediate the threat:
- Email subject
- Attachment name
Warning
There are some risks associated with scanning some Microsoft Outlook files and email messages. You can read about tips and risks associated with scanning Outlook files and email messages in the following articles:
Related topics
Windows Defender replaces Microsoft Security Essentials in Windows 8, but it does not include the ability to quickly right-click folders and scan them. However, you can add this option yourself with a quick registry hack.
This trick adds a “Scan with Windows Defender” option to the context menu that appears when you right-click a folder. It works similarly to the “Scan with Microsoft Security Essentials” option on previous versions of Windows.
Unfortunately, there is no command that launches Windows Defender in graphical mode and initiates a scan, so we will have to launch Windows Defender in a Command Prompt window.
Option 1: Download and Run a .reg File
You can add this option to your registry by downloading and running the file below. This will do everything for you – just download the .zip file, open it, and double-click the AddWindowsDefenderToContextMenu.reg file it contains.
If you want to remove this option later, run the included RemoveWindowsDefenderFromContextMenu.reg file.
If you would rather add this context menu option manually, follow the instructions below.
Option 2: Add the Context Menu Entry Manually
Press the Windows key to access the Start screen, type regedit at the Start screen, and press Enter to launch the Registry Editor.
Navigate to the following key:
HKEY_CLASSES_ROOTFoldershell
Right-click the shell key in the left pane, point to New, and create a new Key. Name it WindowsDefender.
With the WindowsDefender key selected in the left pane, right-click in the right pane and create a new String value. Name it Icon, then double-click it and enter the following value:
%ProgramFiles%Windows DefenderEppManifest.dll
Right-click in the right pane again and create another new String value. Name it MUIVerb, then double-click it and enter the following value:
Scan with Windows Defender
Right-click the WindowsDefender key in the left pane, point to new, and create a new key. Name it Command.
Double-click the (Default) value in the right pane with the Command key selected and give it the following value:
“C:Program FilesWindows DefenderMpCmdRun.exe” -scan -scantype 3 -SignatureUpdate -file %1
When you use the option, you will see the scan happen in a Command Prompt window. You will only be alerted if a problem is found. If the scan is very quick, you will see a Command Prompt window appear and disappear quickly. If a problem is found, the window will alert you instead of closing
Adding Other Entries to Your Context Menu
You can use similar tricks to add any application to your Windows context menu.
If you want to scan individual folders from the graphical user interface, use the Custom option in Windows Defender to scan any file or folder.
READ NEXT- › How to Use the Linux type Command
- › How to Export and Import Your Linux Systems on Windows 10
- › DisplayPort 2: What’s Different, and Why It Matters
- › Valve Now Says Steam Will “Likely” Support Ubuntu 19.10
- › How to Use the Linux lsof Command
Windows Defender, Windows 10’s built in antivirus tool, will keep your PC safe from numerous threats, but it’s not on a par with dedicated third-party anti-malware solutions.
Microsoft is working to make it more useful however, including adding offline capabilities that will allow you to run a system scan at bootup, and without an internet connection. That will make the tool much better at detecting and removing malicious software. Windows Defender Offline is not available to all at the moment, but you can still try it out.
Windows Defender Offline was originally introduced in 2011, and last updated in 2012, but Microsoft has added it to Windows 10 Insider Preview Build 14271 for Fast ring insiders.
If you’re running the latest build you can activate Windows Defender Offline by following these steps:
- Save your work and close any open applications.
- Click Start and launch Settings.
- Go to Update and security and click Windows Defender.
- Scroll down until you see Windows Defender Offline.
- Click the Scan Offline button.
After a countdown (which you can’t stop), your system will restart and Windows Defender will run a scan upon reboot. Microsoft says the process will take around 15 minutes to complete.
While I still wouldn't entirely trust my PC security to Windows Defender, an offline scanning mode is definitely a very welcome addition.
You can also download a version of Windows Defender Offline from here.
Photo Credit: Vladru/Shutterstock
Windows Defender is the security software that protects your PC against different types of malware, including viruses, spyware, and other kinds of malicious code that may cause harm to your device.
Scan An Item Windows Defender App
Although you can choose from a slew of alternative antivirus software, Windows Defender has been improving over the years, and it has proven to be a robust security solution. You don't only get real-time protection and free updates, but for advanced users, there is even a command-line utility to manage and schedule custom tasks.
Furthermore, you can also use the command-line utility to create scripts to quickly run certain tasks and keep your computer running smoothly.
In this Windows 10 guide, we'll walk you through the steps to create different shortcuts using specific commands to run a full or quick virus scan with a single double-click. Plus, we'll show you a quick way to scan the Downloads folder for infected files without even having to open File Explorer.
How to create a shortcut to do a full scan using Windows Defender
Instead of opening up Windows Defender, you can use the following steps to create a shortcut to run a full virus scan on your computer:
- While on the desktop, right-click, and from the context menu select New, and click Shortcut.
- Copy the following commands and paste it in the location of the item field, and click Next:
'%ProgramFiles%Windows DefenderMpCmdRun.exe' -Scan -ScanType 2
Or as an alternative, you can use the following command, which will start a full scan while opening the Windows Defender interface:'%ProgramFiles%Windows DefenderMSASCui.exe' -FullScan
Also, you can use the same command but adding the -Hide switch to run the full scan with the Windows Defender interface minimized.'%ProgramFiles%Windows DefenderMSASCui.exe' -FullScan -Hide
- Enter a custom name for the shortcut, such as 'AV Full Scan' and click Finish.
- Right-click the shortcut and select Properties.
- Click the Change Icon button.
- In Change Icon, enter the following path and press Enter::
%ProgramFiles%Windows DefenderMSASCui.exe
- Select the Windows Defender icon and click OK.
- Click Apply.
- Click OK to complete the task.
Once you completed the steps, simply double-click the shortcut to launch a full scan using Windows Defender.
How to create a shortcut to do a quick scan using Windows Defender
If you prefer, you can create a shortcut to do a quick malware scan on your computer with a single double-click with the following steps:
- While on the desktop, right-click, and from the context menu select New, and click Shortcut.
- Copy the following commands and paste it in the location of the item field, and click Next:John hancock center stores. Jul 07, 2010 Text description provided by the architects. Once the tallest building in the world outside of New York when it was completed in 1970, the John Hancock Center stands along with the Willis (Sears. The John Hancock Mutual Life Insurance. Fazlur Khan and Bruce Graham with a model of the John Hancock Center. Skidmore, Owings & Merrill LLP, Chicago, Illinois. Lehigh University Fazlur R. Khan Distinguished Lecture Series. Stoller, Ezra. The John Hancock Center.
'%ProgramFiles%Windows DefenderMpCmdRun.exe' -Scan -ScanType 1
Or as an alternative, you can use the following command, which will start a quick scan while opening the Windows Defender interface:'%ProgramFiles%Windows DefenderMSASCui.exe' -QuickScan
You can use the same command but adding the -Hide switch to run the quick scan with the Windows Defender interface minimized.'%ProgramFiles%Windows DefenderMSASCui.exe' -QuickScan -Hide
- Enter a custom name for the shortcut, such as 'AV Quick Scan' and click Finish.
- Right-click the shortcut and select Properties.
- Click the Change Icon button.
- In Change Icon, enter the following path and press Enter:
%ProgramFiles%Windows DefenderMSASCui.exe
Gta for pc download full version free. - Select the Windows Defender icon and click OK.
- Click Apply.
- Click OK to complete the task.
Once you completed the steps, simply double-click the shortcut to launch a quick virus scan using Windows Defender.
Bonus: How to quickly scan Downloads folder for malware
If you usually download a lot of files from the internet, instead of doing a full scan, you can setup a batch file to scan only the Downloads folder on-demand to make sure you didn't download any file that can harm your computer.
- Open Notepad.
- Copy and paste the following commands:
- Click on File.
- Click on Save as.
- Pick a descriptive name, such Scan_Downloads, and append the .bat file extension.
Now simply double-click the Scan_Downloads.bat file to begin the scan on the Downloads folder.
If the scan return code is 0, the no malware has been found, or it was successfully removed. And if the scan returns code is 1, then a malware was found and couldn't be cleaned.
It's worth pointing out that you're not limited to scan the Downloads folder, you can always change the folder path %userprofile%Downloads on step 2 and replace it with the location you want to do a quick scan for malware.
Remember that the Windows Defender command-line utility (MpCmdRun.exe) includes a number of features you can use to get even more creative.
While we're focusing this guide on Windows 10, these instructions should also work with previous versions of the operating system, including Windows 8.1 and Windows 7.
Do you usually manually do a malware scan on your computer? Tell us in the comments below.
More Windows 10 resources
For more help articles, coverage, and answers on Windows 10, you can visit the following resources:
Every Windows 10 systems comes with built-in real-time antivirus called Windows Defender. Unlike the basic Windows Defender, or its predecessor Microsoft Security Essentials, provided by Microsoft for previous versions of Windows OS such as Windows 7, Windows Defender Antivirus in Windows 10 is solid and good, and can perform its job in defending and protecting the security of your PC well, especially in view of its ridiculous price – free!
As Windows Defender is built into Windows 10, it runs automatically in the background right after installation or PC set up, ensuring that all Windows 10 users are protected agains viruses, spyware and other malicious software.
Beginning from Windows 10 Creators Update v.1703, Windows Defender’s user inferface has been revamped to be integrated with Windows Defender Security Center, which is the one-stop panel to various security options in Windows 10, for example, virus and threat protection, device performance and health, firewall and network protection, app and browser control, and family options.
Windows Defender essentially runs and performs everything automatically in the background, e.g. scan downloaded files, scan files transferred or imported from external drives, scan files when accessed or opened in real-time. When something malicious detected, it automatically clean up and quarantine and files, with just a notification. It also updates latest virus signature automatically. Everything is done in real-time without your input and no action is required from you.
But what if you want to manually run a antivirus scan, especially if you want to scan suspicious USB flash drive or external hard disk? Manual scan is useful when you suspect your computer may be infected with virus or malware, or you have just downloaded new virus definitions.
First, starting a vending machine business typically means you buy one machine and strategically place it in a high-traffic area. To start a vending machine business with success, you have to speak to the owner of the business you are targeting and work out some kind of deal for them. Owning vending machines can be quite profitable, but you need to understand how a vending machine works before you get in the game. You'll need to be the go-to for every vending machine. How to use a vending machine.
Scan An Item Windows Defender 7
This tutorial shows you how to perform a manual scan with Windows Defender:
- Open Settings ->Update & Security ->Windows Defender, and click or tap on Windows Defender Security Center.You can also open Windows Defender Security Center directly from Start Menu or by searching.
- Go to Virus and threat protection module.
- To start the virus scan in common locations and memory immediately, hit the Quick scan button.Alternatively, click or tap on Advanced scan to perform one of the following 3 types of scans:
- Full scan: Checks all files and running programs on your hard disk, which could take longer than one hour.
- Custom scan: Choose which folder you want to check, useful if you want to perform the manual scan on external hard disk, network drives, shared folders, USB flash drives and etc.
- Windows Defender Offline scan: Windows will restart the device to run the scan with up-to-date threat definitions to help find and remove malicious software that is difficult to remove.
- Windows Defender will report the results when scan is done.
Alternative Method
Scan An Item Windows Defender Pro
Right click on any file and folder (including the root drive for everything on that volume), and select Scan with Windows Defender.
Windows Defender will automatically open to scan the content inside the selected location.