Tip: keyboard shortcut Ctrl+F searches in the page contents.

Windows Defender on-demand scan in Windows 8 and 8.1

How to run a full virus scan or scan just one file or folder with Windows Defender in Windows 8 and 8.1

By . Last modified: 2013-09-12.

Windows Defender in Windows 8 and 8.1 has no built-in support for right-click menus and therefore you cannot easily scan just a single file or folder (adding this method is described later in the article). You can still run quick and full scans.

To launch Windows Defender, open Apps Search using keyboard shortcut Windows Key+Q, type "defender" into Search box and click the result.
Touch screen users should reveal Charms bar by swiping in from the right edge of screen and then tap/touch Search.
Windows 8, Start screen, Apps search. To run Windows Defender, type 'defender' into Search box and click the result. Windows 8.1, Search Everywhere. To run Windows Defender, type 'defender' into Search box and click the result.

As Windows Defender updates its virus and spyware definitions only once a day by default, it is recommended to open Update tab and click Update first.
Those who have configured more frequent signature updates, can skip this step.
Windows 8, Windows Defender, Update tab. To check for latest virus and spyware definitions, click Update.

Running a monthly full anti-virus scan with Windows Defender in Windows 8 and 8.1

A full scan should be performed once every month to ensure that there are no viruses and malware hiding somewhere deep in your computer. You should also run a full virus scan when status of Windows Defender remains red after a quick scan.

Make sure Home tab is open. In the right part of the window click Full under Scan options. Then click Scan now.
Windows 8, Windows Defender, Home tab. To run a full virus and malware scan, select Full from Scan options. Then click Scan now.

Wait until the scan is complete (this might take several hours). Well, you can do some work if you have a fast computer, or you can call your friends or do some exercise... Smile

If everything's fine and status remains green, you can safely close Windows Defender window after the scan is complete.

Windows Defender lets you in case some malware has been detected - a yellow triangle with black exclamation mark appears with the warning. You must still wait until the scan completes to see details on the detected items.
Windows 8, Windows Defender is scanning your PC. If some malware has been detected, a yellow triangle with black exclamation mark appears along with 'Preliminary scan results show that malicious or potentially unwanted software might exist on your system'.

If potential threats have been detected, Windows Defender will turn its status to red (for severe and high risk malware) or yellow-orange and present a big button named Clean PC after the scan is complete. Click that button to apply default actions right away.
You can also review detected items and select actions for these using the Show details link under the big red button.
Windows 8, Windows Defender detected potential threats on your PC. Click Clean PC. Windows 8, Windows Defender detected potential threats on your PC. To review detected items, click Show details.

If you chose to review all threats, a Windows Defender Alert window pops up. Here you can set action for each detection or use the Show details button to see threat description. After reviewing or making changes, click Apply actions.
Windows 8, Windows Defender Alert, list of detected threats. You can change actions and view details. Click 'Apply actions' after you're done.

If you clicked the Clean PC button, Windows Defender will apply default actions and present a list of removed malware. You can again use the Show details button for more detailed descriptions on selected item.
Click Close.
Windows 8, Windows Defender Alert, list of removed threats. Click Close.

In some cases, a restart is required to remove all traces of malicious software. It is strongly recommended to reboot your PC right away in such situations.

If the same malware still reappears, use RKill for detecting and stopping active malware services and processes (the scan takes only about 5 minutes!). Then use Malwarebytes Anti-Malware to get rid of the infection.

Advanced usage - scan just one file or folder with Windows Defender in Windows 8 and 8.1

While Microsoft has removed Windows Defender context menu from Windows (File) Explorer, you can still use Command Prompt for scanning (and cleaning) just one folder or file. If you choose to scan a folder, all its subfolders will be scanned, too.

First, open Windows Explorer (Windows Key+E) and navigate to C:\Program Files\Windows Defender folder. Open File menu on Ribbon (if it is not visible, use keyboard shortcut Ctrl+F1), expand Open command prompt and click Open command prompt as administrator.
Windows 8, Windows Explorer, File menu. Expand 'Open command prompt' and click 'Open command prompt as administrator'.

Click Yes in User Account Control. This will open the so-called Elevated Command Prompt in Windows Defender program folder.

Next, use Windows/File Explorer to navigate to the folder or file you want to scan. Hold down Shift key on keyboard and right-click the folder or file. Then click Copy as path. This will copy the full path to the item to Clipboard.
Windows 8, Windows Explorer, Shift+right-click. Select 'Copy as path'.

Now activate the Command Prompt window you opened earlier and type the following command: MpCmdRun -Scan -ScanType 3 -File. Add a space after "-File" and right-click in the window. Click Paste to add the copied path.
Press Enter key to launch the command.
Windows 8, Administrator Command Prompt. Type 'MpCmdRun -Scan -ScanType 3 -File' and add a space. Right-click the window and select Paste.

The "-ScanType 3" tells Windows Defender to perform a custom scan. As you might remember from the Configure Windows Defender in Windows 8 and 8.1 article, "-ScanType 1" means a Quick scan and "-ScanType 2" means a Full scan. Only "3" allows using the additional "-File" switch for specifying a file or folder to scan for viruses and malware.

Please wait until the scan completes. If no malicious items were detected, the "Scanning found no threats" message is displayed.
Windows 8, Administrator Command Prompt, Scanning found no threats. It is safe to close the window.

If one or more threats were detected, Windows Defender will try to disinfect these. A usual pop-up notification (called Toast notification in Windows 8/8.1) appears on the top right of screen upon malware detection.
The "Cleaning finished" message should appear after threat removal is complete.
Windows 8, Administrator Command Prompt, Cleaning finished. It is safe to close the window. Windows 8, Malware Detected, Windows Defender is taking action to clean detected malware. Stand by.

You can either close the Administrator Command Prompt window or run another custom scan. You can recall the last command by pressing the Arrow Up key (↑) - just delete the path after "-File" switch and paste a new path.

Making the scanning easier

If you need to perform manual scans frequently, you can create a special batch file on your Desktop.
Thank you Yugarian for the tip!

Open Start screen using Windows Key and type "notepad". Click the result.
Windows 8, Start screen. Type 'notepad' and click the result. Windows 8.1, Search Everywhere. Type 'notepad' and click the result.

Type (or copy & paste) the following lines:

"C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 3 -File %1
Windows 8, Notepad, automating Windows Defender scans.

The first line turns off echoing (displaying) of each listed command. The "%1" in the end of the second line means the first supplied folder or file name. The third line causes Command Prompt to pause until user presses a key - otherwise the window will close automatically.

Now open File menu and click Save As.
Windows 8, Notepad. Open File menu and click Save As.

First, select All Files (*.*) from the Save as type combo box. Then set a File name for the batch file - "Defender Scan.cmd" in this example. You can change the name as you like, but make sure you include the ".cmd" extension in the end, this makes the batch file executable.
Click Save.
Windows 8, Notepad, Save As. Set All Files for Save as type.

Now you can drag any folder or file from File Explorer/Windows Explorer onto the batch file icon on Desktop and the item will be scanned.
Windows 8, Desktop. Drag any file or folder onto the batch file icon.

Adding Windows Defender to Send To menu

To make on-demand scanning even easier, there is a trick to add the previously created batch file to users' Send To menu.

First, open File (Windows) Explorer. Then open View tab on Ribbon (if Ribbon is not visible, use keyboard shortcut Ctrl+F1) and make sure the Hidden items check box is ticked. This enables the displaying of hidden files and folders.

Second, copy the previously created batch file (Windows Defender.cmd) - right-click it and select Copy. Using keyboard shortcut Ctrl+C works equally well.

Third, back in File Explorer, locate and open C:\Users folder, double-click the subfolder with your user name and navigate to AppData\Roaming\Microsoft\Windows\SendTo subfolder.
For example, if your user name were Linus, the full path would be C:\Users\Linus\AppData\Roaming\Microsoft\Windows\SendTo.

Fourth, paste the batch file into the Send To folder using keyboard shortcut Ctrl+V or by right-clicking in an empty space and selecting Paste.

If you did everything correctly, the batch file is now available in Send To menu. Just right-click a file or folder, expand Send To menu and see if there is a Windows Defender.cmd (the name is different if you saved the batch file with some other name) entry.
Windows 8, Send To menu, Windows Defender entry

In case there are other users on the same computer, you should copy the batch file to their SendTo folder also. Somehow, you cannot enable the scanning for all users at once by copying the file to same subfolder of the Default profile.

Please support
No PayPal account required!

Page 1 Of 2 > >>


Page 1 Of 2 > >>

 Comments? Suggestions? Ideas? Let me know! 
Your name (public):
Your e-mail (will not be displayed):
Notify me of new comments to this item: (send e-mail to info[at] to stop receiving)
Your comments/suggestions/ideas (no HTML code!) owners reserve the right to remove or not publish comments that they find unacceptable because of strong language, inappropriate contents, advertising or spamming. Privacy Policy.
This is a captcha-picture. It is used to prevent mass-access by robots. (see:
Share: Facebook Google+ Twitter LinkedIn StumbleUpon Pinterest E-mail

Browser and plugin check Google Custom Search Donate to keep this site running