Update your legitimate security tool, choose a scan that fits the concern, and read the result rather than just the progress bar. A quick scan, full scan, and offline scan have different purposes. Do not install a “scanner” promoted by an alarming pop-up.
Before you start
Save open work and make sure important files have a backup. If you suspect active file encryption or remote compromise, disconnect the device from networks and shared drives first. A routine scan is different from responding to an ongoing incident.
Open the security tool from the operating system or a known installed app. Confirm that protection and security updates are active. Do not click a browser advertisement claiming that your computer has hundreds of infections; a normal web page has not performed a full system scan.
Choose a suitable Windows scan
In Windows Security, open Virus & threat protection. A quick scan checks common areas of concern. A full scan is more extensive, while a custom scan lets you target a particular file or folder. If the system offers an offline scan, it restarts into a different environment to help investigate persistent threats. Save work before choosing that option.
The right choice depends on what happened. A downloaded file you have not opened may justify a targeted scan. Unexpected behaviour across the system may warrant a more extensive check. Follow Microsoft’s current instructions for your version rather than assuming every menu is identical.
What scanning means on other devices
| Platform | Useful approach | Important limit |
|---|---|---|
| macOS | Keep macOS current; use established tools if you need an additional scan | Built-in protections and third-party scanners have different interfaces and scopes |
| Android | Review Play Protect, installed apps, permissions, and a reputable security tool if needed | Manufacturer settings and app restrictions vary |
| iPhone / iPad | Update iOS, review apps, profiles, account sessions, and suspicious browser permissions | A normal App Store app cannot freely scan the entire system like a desktop antivirus |
Interpret the result carefully
Record the detection name, path, time, and recommended action. A quarantined item has been isolated by the security tool; that is different from a file being permanently deleted. Do not restore it merely because an application complains that it is missing. Verify the source and consult the security provider if you believe it is a false positive.
If the scan finds nothing, return to the original symptom. Browser notifications, a failing drive, heavy background updates, and account theft can produce problems a malware scan will not resolve. A clean result is one useful check, not a certificate of complete safety.
After the scan
- Apply the tool’s recommended action and restart if requested.
- Review protection history and confirm that normal protection remains active.
- If the same threat returns, investigate the source instead of repeatedly dismissing it.
- If passwords or sessions may have been stolen, secure those accounts from another trusted device.
- Check your backups and update the software involved in the incident.
Do not turn scanning into a risky experiment
Avoid downloading live malware, disabling protections, or running unknown scripts to test a product. For an ordinary home user, reliable updates and correctly configured protection are more useful than trying to recreate a malware laboratory.
If you need to change antivirus, follow the vendors’ uninstall and installation guidance. Two overlapping real-time engines can cause conflicts. Our antivirus selection guide explains how to compare products without relying on alarming marketing messages.
Questions, answered
How often should I run a full scan?
There is no universal schedule for every device. Keep real-time protection and updates active, and follow the product’s guidance. Run an additional scan after a specific concern or warning.
Should I upload a private file to a public scanning service?
Consider its contents and the service’s sharing policy first. Confidential documents and proprietary files should not be uploaded casually.
Sources & further reading
Source review: September 25, 2026. Product features and subscriptions can change; confirm the exact plan before purchase.
About the author
Oliver ReedDevice & family securityOliver’s coverage explores device protection, malware prevention, recovery, and family device controls. These guides put operating-system tools first, explain when extra protection may help, and distinguish prevention from a response to an active incident.
View profile and articles
