How to use Windows Defender Scan Offline Tool

Discussion in 'User Contributed Articles' started by Wolfie, Jan 21, 2018.

  1. Wolfie

    Wolfie

    Joined:
    Apr 22, 2017
    Messages:
    2,519
    Likes Received:
    280
    Hi all,

    for a normal offline scan, open Windows Defender Security app > Virus & threat protection > Advanced scan > Scan now (tick the box first).
    Your computer will restart and scan your system, please make sure you have updated Windows Defender to the latest virus definitions:

    windows defender offline AV scanner.JPG 6.JPG

    windows defender offline AV scanner.JPG 5.JPG

    Save your work before you continue!:

    windows defender offline AV scanner.JPG 7.JPG

    See also (If you want more info about windows defender direct from MS):


    https://docs.microsoft.com/en-us/wi...urity-center/windows-defender-security-center

    And (Plenty of vids on YouTube!):

    ;)

    There are a couple of other free "Offline Scan Tools". (You do not need the pay version so please read each page carefully before you download and commit yourself to spending money!). ;)

    Avast:

    https://blog.avast.com/2015/08/10/how-to-scan-and-remove-viruses-when-your-computer-is-offline/

    Main site: https://www.avast.com/en-gb/index

    Avira:

    Covered here: https://www.windows10forums.com/threads/avira-security-rescue-system-live-cd-anti-virus-app.14109/

    Main site: https://www.avira.com/

    Kaspersky:

    https://support.kaspersky.com/4162

    Main site: https://www.kaspersky.com/?_ga=2.268048135.827360109.1516777451-371344618.1516777451

    Bitdefender:

    https://www.bitdefender.com/support/how-to-create-a-bitdefender-rescue-cd-627.html

    Main site (Freeware):

    https://www.bitdefender.com/free-virus-removal/

    If all else fails, you can follow the advice listed here and keep your data intact:

    https://www.windows10forums.com/threads/re-install-w10-and-keep-your-files-app-data-intact.15825/ :)
    I hope it helps. :):):)
     
    Last edited: Jan 27, 2018
    Wolfie, Jan 21, 2018
    #1
    garybear likes this.
    1. Advertisements

  2. Wolfie

    Grizzly

    Joined:
    Oct 26, 2016
    Messages:
    1,397
    Likes Received:
    365
    Location:
    North Carolina
    Nice article. Appreciate it.
     
    Grizzly, Jan 21, 2018
    #2
    Wolfie likes this.
    1. Advertisements

  3. Wolfie

    Wolfie

    Joined:
    Apr 22, 2017
    Messages:
    2,519
    Likes Received:
    280
    Hi Grizzly,

    I am waiting for MicroScrap to phone me as it isn't doing what it is supposed to!. I will let them know what I have found thus far and hopefully they will fix it!. LOL :):):):)
     
    Wolfie, Jan 21, 2018
    #3
  4. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    Could be because it was designed to run in Windows 7?
     
    davehc, Jan 21, 2018
    #4
    Wolfie likes this.
  5. Wolfie

    Wolfie

    Joined:
    Apr 22, 2017
    Messages:
    2,519
    Likes Received:
    280
    Hi Dave,

    I missed something, I thought it was for both but you are right and the tool is only for W7, I have re-written the topic to reflect the fact. Thanks!.

    It wasn't quite clear to me at least, poor format on their part (I have to blame someone!). :):):)
     
    Last edited: Jan 21, 2018
    Wolfie, Jan 21, 2018
    #5
  6. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    I can give you some tips! I am very good at blaming someone when the wife moans.
     
    davehc, Jan 21, 2018
    #6
    Wolfie likes this.
  7. Wolfie

    Wolfie

    Joined:
    Apr 22, 2017
    Messages:
    2,519
    Likes Received:
    280
    Have a look see if it makes more sense now please Dave, if it doesn't, I will blame you LOL!. :):):):)

    Hi @Ian ,

    I will work on improving the info for W10 but want to leave the info for W7 too as it is a very useful tool for W7 (I think W8 too?). :)
     
    Last edited: Jan 21, 2018
    Wolfie, Jan 21, 2018
    #7
  8. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    Sorry for the late reply. - Bedtime!
    Unfortunately, I would not see the purpose of having this on Windows 10. As I said, it was for window 7, but, even there , had its limitations.

    Since Windows 10, however, an offline scan can be quite simply run from within the built in program.
     
    Last edited: Jan 22, 2018
    davehc, Jan 22, 2018
    #8
  9. Wolfie

    Wolfie

    Joined:
    Apr 22, 2017
    Messages:
    2,519
    Likes Received:
    280
    Morning Dave,

    I know in the meantime that the offline scanner tool is indeed for W7 thanks to your sharp eyes!. :) That said, I think it could still be useful to dual-booters at least. If @Ian wants me to remove it, I don't have a problem with that, otherwise it looks okay to me. ;)
     
    Wolfie, Jan 22, 2018
    #9
  10. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    Last edited: Jan 22, 2018
    davehc, Jan 22, 2018
    #10
  11. Wolfie

    Regedit32 Moderator

    Joined:
    Mar 4, 2016
    Messages:
    2,937
    Likes Received:
    907
    Windows 10 since the Anniversary update 1607 has pretty much eliminated the need for an bootable disk for off line scanning. Nevertheless, it would do no harm creating one as a extra backup.

    For what it's worth the Windows 10 Defender Offline Scan uses downloads and uses the following files:

    Code (Text):
    EppManifest.dll
    mpasdesc.dll
    MpClient.dll
    MpCmdRun.exe
    MpCommu.dll
    MpSvc.dll
    MpTpmAtt.dll
    MsMpCom.dll
    MsMpEng.exe
    MsMpLics.dll
    MsMpRes.dll
    msseces.exe
    OfflineScannerShell.exe
    EN-US\MpSwpHelp.RTF
    EN-US\MsMpRes.dll.mui
    EN-US\offlinescannershell.exe.mui
    EN-US\EppManifest.dll.mui
    EN-US\EULA.RTF
    EN-US\mpasdesc.dll.mui
    Perhaps you can create your own bootable disk using Linux as the shell and the above files of course.
     
    Regedit32, Jan 22, 2018
    #11
  12. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    Thinking deeper. If a user wants to make a portable anti virus boot, perhaps consideration should be given to using a third party program, as a double check.
    If one is determined to use Defender, though, Then, I would suggest again, I see no purpose in it, when it can be run from within windows itself?
    In fact, why would you need to run it offline anyway. I could understand MS trying to promote their newly bought anti virus for Windows xp/7, but no longer as it is now integrated.
     
    davehc, Jan 22, 2018
    #12
    Ian likes this.
  13. Wolfie

    Regedit32 Moderator

    Joined:
    Mar 4, 2016
    Messages:
    2,937
    Likes Received:
    907
    The offline scan is just another tool in the Arsenal for the scenario when one gets a pig of a bug which may not be able to be fully removed while the computer is running or has internet access.

    I agree that build-in offline should be sufficient given you can run it from the Command Console using WMIC or from PowerShell, or if you are still at the Desktop then from the built-in GUI of Windows Defender Security Center.

    In the event one is, in actual fact infected with the type of Virus that requires an offline scan, Windows Defender will display a message on screen informing you as such. Most virus/trojans the average user is exposed to though would be basic advertising scripts that open other instances of your browser and may from time to time end up on scam type trojans that attempt to make you believe you are in need of support that requires $$$. Defender is more than capable of detecting these and removing them without the need for an offline scan.

    I'm satisfied Defender and the monthly Malicious Removal tool Microsoft offers can handle most virus, but agree with davehc on the point that if if gets this far one needs offline scanning, they would be wise to have other third party options available, for which their are many excellent free tools, as well as ones you can pay for.

    At the end of the day, I'd recommend a full backup of your files first before creating bootable antivirus disks.
     
    Regedit32, Jan 22, 2018
    #13
    Ian likes this.
  14. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    Nuf said.
    I falling in support of Ian.
    This thread is only going to confuse. Perhaps the whole thing should just be removed
    Only my pov, but wouldn't root kits, the lowest boot up level available, be found anyway with a scan -off or online? Defender claims it can do this-
     
    Last edited: Jan 22, 2018
    davehc, Jan 22, 2018
    #14
  15. Wolfie

    Wolfie

    Joined:
    Apr 22, 2017
    Messages:
    2,519
    Likes Received:
    280
    I recently had a collection of viruses and I used Avira Anti Virus scanning tool (Offline CD); it found 11 Trojans and said it renamed them (I selected that option), it didn't work, Windows Defender couldn't be accessed either off or online at the time!. :(
     
    Wolfie, Jan 23, 2018
    #15
  16. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    I suggest there is a built in danger for using any off line scanners for virus.
    If it does clean, as well as report, anything it may find, there is , imho, always the possibility that, due to a deliberate name change from a virus, after the scan a computer may not boot at all.
    Regedit's earlier advice, which I wholeheartedly support. - Make sure you have a reliable backup/Image, before you go to that length.
     
    davehc, Jan 23, 2018
    #16
  17. Wolfie

    Ian Administrator

    Joined:
    Oct 27, 2013
    Messages:
    1,467
    Likes Received:
    488
    I think it may be worth editing out the W7 part, as I think it may confuse things for anyone not paying full attention to the first post. It's your article, so you can do as you wish, but I don't see much use in having the W7 related info on a W10 site, given that it won't run on W10. :)
     
    Ian, Jan 23, 2018
    #17
    davehc likes this.
  18. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    I have to agree. I fear a consequent deluge of members being unable to reboot!--Lol
     
    davehc, Jan 23, 2018
    #18
  19. Wolfie

    garybear

    Joined:
    Jan 22, 2018
    Messages:
    81
    Likes Received:
    13
    garybear, Jan 23, 2018
    #19
    Wolfie likes this.
  20. Wolfie

    davehc

    Joined:
    Nov 19, 2013
    Messages:
    4,036
    Likes Received:
    773
    Location:
    Denmark
    Hi Gary.

    I think your post is just a little off target for this thread. More appropriate in the windows 10 support section - just my view. you could, if still able, copy and paste and delete this one if so inclined?
     
    davehc, Jan 23, 2018
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.