If this is the case, you can use the Microsoft Defender Offline feature to scan and remove virtually any type of malware, including viruses, rootkit, ransomware, and other malicious software that may be hard to delete while the OS is running. In this guide, you will learn the steps to use the Microsoft Defender Offline scan to detect and remove highly persistent malware. (See also the video tutorial with the steps to complete this task.)

Perform offline virus scan on Windows 11

To do a full offline virus scan on Windows 11, use these steps: Once you complete the steps, the computer will restart automatically in the recovery environment, and Microsoft Defender will start the full virus scan. If the Windows 11 antivirus detects any virus, rootkit, or any other type of malware, it’ll remove it automatically.

After the scan, you can find the Microsoft Defender Offline scan results on Windows Security > Virus & threat protection > Protection history. All content on this site is provided with no warranties, express or implied. Use any information at your own risk. Always backup of your device and files before making any changes. Privacy policy info.