How to Scan Windows for Malware
Scanning is only useful if you pick the right scan and act on the output. Here is the sequence we use.
Before scanning
- Save open work — a removal may require a reboot.
- Update the threat database.
- Close browsers so their cached files do not lock.
Which scan to run
Start with a threat scan: memory, startup items, registry and the paths malware actually uses. Escalate to a custom scan with rootkit checking only if the threat scan is clean but the symptoms continue. Full-drive scans of media libraries are mostly wasted time. See the scanner guide for durations.
Scanning with Windows Security too
Windows Security offers an offline scan that reboots into a minimal environment before Windows loads — genuinely useful against persistence that survives normal-mode cleanup. Find it under Virus & threat protection → Scan options → Microsoft Defender Offline scan.
After the scan
Quarantine detections, reboot, and scan again. A second clean scan after a restart is the confirmation that matters. If detections return, follow the malware removal process.
Frequently asked questions
How often should I scan?
Weekly for a PC with real-time protection; before and after installing unfamiliar software; and immediately whenever the machine behaves strangely.
Malware-Bytes.net is an independent information resource about malware protection for Windows. We are not Malwarebytes, and this site is not the official Malwarebytes website or support channel. Malwarebytes is a trademark of Malwarebytes Inc.