Skip to main content

Windows Defender

Introduction​

Windows Defender is the antivirus and antimalware solution built into Windows. It is enabled by default and provides real-time protection against threats: viruses, spyware, ransomware, etc. Windows Defender works seamlessly with Windows Update to receive the latest virus definitions.

Since Windows 10, Windows Defender is part of a larger suite called Windows Security (Windows Security Center), offering comprehensive system protection.

Main Components of Windows Defender​

ComponentDescription
Virus & threat protectionFile scanning, virus detection, quarantine
Account protectionMonitoring logins and identities
Firewall & network protectionIntegration with Windows Firewall
App & browser controlProtection against potentially dangerous apps and suspicious websites
Device securityMonitoring hardware integrity and secure boot
Device performance & healthSystem health reports
Family optionsParental controls and child account management

Available Scan Modes​

  1. Quick scan: checks critical locations (running processes, registry, startup files).
  2. Full scan: checks the entire system.
  3. Custom scan: allows selecting specific folders.
  4. Windows Defender Offline scan: restarts the computer and runs a scan outside of Windows to detect deeply embedded malware.

User Interface​

Accessible via:

Settings → Update & Security → Windows Security

Graphical interface for:

  • Viewing protection status
  • Running a scan
  • Managing quarantines
  • Configuring protections

Best Practices​

  • Never disable Defender except for specific testing or troubleshooting.
  • Keep the system updated for the latest threat signatures.