Windows 10: Create Windows Defender Offline Scan shortcut in Windows 10

How to: Create Windows Defender Offline Scan shortcut in Windows 10


Information On Windows 10, Windows Defender Offline is completely automated. This means Windows Defender when it identifies advanced malware will recommend that Windows Defender Offline be run and on the next reboot Windows Defender Offline will automatically scan/remediate the malware and reboot into Windows 10.

Some malicious software can be particularly difficult to remove from your PC. Windows Defender Offline will restart and scan your PC offline (at boot) to help find and remove them using up-to-date definitions.

This tutorial will show you how to download or create a Windows Defender Offline scan shortcut to manually run an offline scan of your PC in Windows 10.


Note You must be signed in as an administrator to be able to scan offline with Windows Defender Offline.

When you run the Windows Defender Offline scan shortcut, you will be prompted by UAC to approve, and your computer will automatically restart to perform the offline scan with Windows Defender Offline.

CONTENTS:

• Option One: To Download a Windows Defender Offline scan Shortcut
• Option Two: To Manually Create a Windows Defender Offline scan Shortcut

EXAMPLE: Windows Defender Offline scan













OPTION ONE [/i] To Download a Windows Defender Offline scan Shortcut
1. Click/tap on the Download button below to download the .zip file below.
Windows_Defender_Offline_scan_shortcut.zip

Download
2. Save the .zip file to your desktop.

3. Unblock the .zip file.

4. Open the .zip file, and extract (drag and drop) the shortcut to your desktop.

5. If you like, you can assign a keyboard shortcut to, or move this shortcut to where you like for easy use.

6. When finished, you can delete the downloaded .zip file if you like.




OPTION TWO [/i] To Manually Create a Windows Defender Offline scan Shortcut
1. Right click or press and hold on an empty area on your desktop, and click/tap on New and Shortcut.

2. Copy and paste the location below into the location area, and click/tap on Next. (see screenshot below)
*Arrow PowerShell.exe Start-Process PowerShell -Verb RunAs Start-MpWDOScan




3. Type Windows Defender Offline scan for the name, and click/tap on the Finish button. (see screenshot below)
NOTE: You could name this shortcut anything you would like though.



4. Right click or press and hold on the new Windows Defender Offline scan shortcut, and click/tap on Properties.

5. Click/tap on the Shortcut tab, then click/tap on the Change Icon button. (see screenshot below)



6. In the line under "Look for icons in this file", copy and paste the location below, and press Enter. (see screenshot below)
*Arrow %ProgramFiles%\Windows Defender\EppManifest.dll




7. Select the icon highlighted in blue above, and click/tap on OK. (see screenshot above)
NOTE: You could use any icon that you would like instead though.

8. Click/tap on OK. (see screenshot below step 5)

9. If you like, you can assign a keyboard shortcut to, or move this shortcut to where you like for easy use.

That's it,
Shawn


Related Tutorials

• How to Create Windows Defender Security Center Shortcut in Windows 10
• How to Perform a Windows Defender Offline Scan in Windows 10
• How to Add or Remove Windows Defender context menu in Windows 10
• How to Manually Scan Files, Folders, and Drives with Windows Defender in Windows 10
• How to Schedule a Scan in Windows Defender Antivirus in Windows 10

:)

 

Windows Defender Offline

I have encountered the same problem, You can open the offline scan with a shortcut:

https://www.windowsphoneinfo.com/threads/create-windows-defender-offline-scan-shortcut-in-windows-10.9222/

If I had a better way, I'd tell you

 

How do I get rid of this message??? Windows 10 is unusable right now. Who can I contact? Other browsers are working.

Try create a bootable scan with Windows Defender Offline:

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

 

Nice icon Cliff. Thank you for sharing. *Smile

 

Thanks Shawn, that with the circle is suppose to be a virus in crosshairs, but somehow the crosshairs got smudged when I antialiased the finished icon*chuckle

In case someone wants to know how it looks on the desktop with a wallpaper:

 

So I just ran it on my desktop(10586.122) and it ran through like a charm*Smile
Of course it found nothing(I only download from Developers sites/link and Major Geeks if I must, and I'm protected with MBAE), but it ran.

 

Shawn, it worked om my Pro desktop, but it's not on my Home laptop.
I have 2 questions:
1.) Could it be the Home or Pro version?

2.) Or could it be the Set-ExecutionPolicey? I have use PowerShell on my desktop already, but not on my laptop.*Confused

 

Try the shortcut again. I've noticed that if the offline scan has never been ran before, the shortcut may not work until the second time.

 

I have already tried a whole bunch of times. I even tried rebooting, and trying again. All the happen is command prompt open, ask for permission, I give it, then Administrator PowerShell opens for a bit with the underline cursor in the top left(no text), then it closes. After that nothing*Huh

 

A registry key that might be worth looking at tomorrow on my laptop.
This is from my Event Viewer log on my desktop:
Code: + System - Provider [ Name] Microsoft-Windows-Windows Defender [ Guid] {11CD958A-C507-4EF3-B3F2-5FD9DFBD2C78} EventID 5007 Version 0 Level 4 Task 0 Opcode 0 Keywords 0x8000000000000000 - TimeCreated [ SystemTime] 2016-03-02T15:56:55.030191000Z EventRecordID 995 Correlation - Execution [ ProcessID] 2268 [ ThreadID] 5276 Channel Microsoft-Windows-Windows Defender/Operational Computer Desktop-Tower - Security [ UserID] S-1-5-18 - EventData Product Name %%827 Product Version 4.9.10586.0 Old Value N/A\Scan\OfflineScanRun = New Value HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun = 0x0 [/quote]

 

Cliff,

I'll set up a Windows 10 Home build 10586 VM later tonight to test more, and will post back. I only tested on a Windows 10 Pro/Enterprise build 10586 and build 14271 editions.

 

@Cliff S,

I just finished testing in clean install of Windows 10 Home build 10586, and the shortcut worked without issue first time using it. *Smile

 

Ok thanks for testing, I'll need to look at this more when i get home from work this afternoon.

 

I just tried these one after the other, both didn't help:

1.) I ran:
fsutil resource setautoreset true c:\&fsutil usn deletejournal /d /n c:&Dism.exe /online /Cleanup-Image /StartComponentCleanup&&sfc /scannow&Dism.exe /Online /Cleanup-Image /RestoreHealth&sfc /scannow&Dism.exe /Online /Cleanup-Image /StartComponentCleanup /ResetBase&pause
and rebooted(even though it found nothing)


2.) I tried Set-ExecutionPolicy Unrestricted, also didn't help, so of course I set it back to Restricted.


3.) Looking in the Registry didn't help, it only says I haven't run it yet:
LastofflineScan RegBinary :
0000 00 00 00 00 00 00 00 00........
0008
Yeehaw puzzles are fun*Think!

 

Ok Shawn, I'm in the process of doing a repair install on my laptop(just pulled the trigger), if this doesn't fix running the shortcut, I give up until Redstone comes out.

The laptop is just a machine backup if something on my desktop breaks(hardware), and I don't have temporary replacement parts(I have the original RAM and a smaller backup SSD I can clone with Macrium*Nerd).