How to Schedule Regular Microsoft Defender Offline Scans

What Causes This?

Some malware is designed to hide while Windows is running, which makes it harder for a normal Microsoft Defender scan to detect or remove. Microsoft Defender Offline Scan works by restarting your PC into a special environment before Windows fully loads, so hidden threats have less chance to protect themselves. The problem is that Windows does not offer a simple built-in option to schedule Defender Offline scans on a regular basis, so you need to create that schedule yourself.

Common Symptoms

• Microsoft Defender finds threats repeatedly but cannot fully remove them
• Suspicious pop-ups, redirects, or background activity keep coming back
• Your PC feels infected even after running a normal Quick Scan or Full Scan
• You want regular offline malware checks, but Windows has no obvious scheduling option
• Defender asks for a restart to complete cleanup

How to Fix It Manually

1. Confirm that Microsoft Defender is your active antivirus

   • Press Windows + I to open Settings.
   • Go to Privacy & security > Windows Security > Open Windows Security.
   • Click Virus & threat protection.
   • Make sure Microsoft Defender Antivirus is active. If you use another antivirus, Defender Offline may not be available.

2. Test a manual Microsoft Defender Offline scan first

   • In Windows Security, open Virus & threat protection.
   • Click Scan options.
   • Select Microsoft Defender Offline scan.
   • Click Scan now and allow the restart.
   • This confirms the feature works correctly on your PC before you try to automate it.

3. Open Task Scheduler

   • Press Windows, type Task Scheduler, and open it.
   • In the right pane, click Create Task. Do not use Create Basic Task, because you need more control.

4. Set up the scheduled task

   • On the General tab, name it something clear like Microsoft Defender Offline Scan.
   • Check Run with highest privileges.
   • If available, choose Run whether user is logged on or not.
   • Set Configure for to your version of Windows.

5. Create the schedule

   • Open the Triggers tab and click New.
   • Choose how often you want it to run, such as Weekly or Monthly.
   • Pick a time when restarting the PC will not interrupt your work, such as late evening or a lunch break.
   • Make sure Enabled is checked, then click OK.

6. Add the Defender Offline command

   • Open the Actions tab and click New.
   • In Program/script, enter: "%ProgramFiles%\Windows Defender\MpCmdRun.exe"
   • In Add arguments, enter: -Scan -ScanType 2
   • Click OK.
   • Note: Windows does not provide a fully supported direct command for scheduling the full offline reboot scan in every version, so this task may run a deep Defender scan rather than trigger the exact Offline Scan experience. If you specifically need the offline environment, you may still need to launch it manually from Windows Security.

7. Adjust task conditions and save

   • Open the Conditions tab.
   • Uncheck Start the task only if the computer is on AC power if you use a laptop and want the task to run on battery.
   • On the Settings tab, enable Run task as soon as possible after a scheduled start is missed.
   • Click OK and enter your Windows password if prompted.

8. Verify it works

   • In Task Scheduler, find your new task in Task Scheduler Library.
   • Right-click it and choose Run.
   • Then open Windows Security > Virus & threat protection > Protection history to confirm Defender started the scan.
   • If you need a true offline scan for stubborn malware, run Microsoft Defender Offline scan manually from Scan options whenever you suspect a deeper infection.

Fix It Automatically with Kudu

Kudu can help detect security issues, clean up risky system conditions, and simplify routine maintenance so your PC stays in better shape without digging through Windows tools yourself. If malware symptoms keep returning or Defender settings are hard to manage, Kudu gives you a faster way to identify and fix common Windows problems safely.

Download Kudu Free →