Scan Single File Folder Windows Security: How To
To scan a single file or folder with Windows Security, right-click the item in File Explorer and select “Scan with Microsoft Defender” (or “Scan with Windows Defender”). This runs a targeted antivirus scan on just that selection, which is faster than a full system scan and useful when you suspect a specific download or folder.
Why Scan a Single File or Folder?
Full system scans are thorough but can take a long time, especially on large drives with many files. Scanning a single file or folder is useful when you have just downloaded a suspicious attachment, received a USB drive from someone else, or want to check a specific directory before opening its contents. It lets you verify a specific item without waiting for a full scan.
This targeted scan checks the selected files against the same malware definitions and heuristics that a full scan uses, so you get the same detection engine applied to just the items you care about. It does not replace regular full scans, but it is a practical way to check something quickly.
How to Scan a Single File or Folder in Windows Security
Windows Security (formerly Windows Defender) is built into Windows 10 and Windows 11. The quickest way to scan a single item is through File Explorer.
- Open File Explorer (Windows key + E).
- Navigate to the file or folder you want to scan.
- Right-click the item.
- In the context menu, click “Scan with Microsoft Defender”. (On some versions, it may say “Scan with Windows Defender.”)
- A Windows Security window will open showing the scan progress. It usually completes within seconds to a few minutes depending on the size and number of files.
If the right-click option is missing, you can also scan through the Windows Security app itself:
- Open Windows Security (search for it in the Start menu).
- Go to Virus & threat protection.
- Under “Current threats,” click Scan options.
- Select Custom scan and click Scan now.
- Choose the file or folder you want to scan and click Select Folder.
Both methods run the same underlying antivirus engine.
What the Scan Actually Checks
The scan checks the selected files against Microsoft’s malware definitions (a constantly updated database of known threats) and uses heuristic analysis to detect new or modified malware that may not be in the database yet. It examines file content, metadata, and behavior patterns. The scan also checks for potentially unwanted applications (PUAs) such as adware or bundling software, depending on your Windows Security settings.
It does not scan the entire system, memory, or startup items—only the selected file or folder. If the folder contains subfolders, they are included in the scan. The scan is read-only; it does not modify files unless it detects a threat and you choose to quarantine or remove it.
Common Problems and How to Fix Them
Sometimes the right-click scan option does not appear. This can happen if:
- You are using a third-party antivirus that has disabled Windows Defender’s context menu integration. In that case, use the Custom scan method in Windows Security instead.
- Your Windows version is outdated. Make sure you have the latest Windows updates installed.
- The file is on a network drive or a cloud-synced folder that is not fully downloaded. Try downloading the file to your local drive first.
If the scan finds a threat, Windows Security will prompt you to take action. You can choose to quarantine the item (recommended), remove it, or allow it if you are sure it is a false positive. Quarantine isolates the file so it cannot harm your system, and you can restore it later if needed.
Scanning from the Command Line
If you prefer command-line tools, you can use PowerShell with the Start-MpScan cmdlet. Open PowerShell as Administrator and run:
Start-MpScan -ScanType CustomScan -ScanPath "C:\Users\YourName\Downloads\suspiciousfile.exe"
This triggers the same Windows Defender scan engine. You can also scan a folder by providing the folder path. This method is useful for scripting or when the right-click option is unavailable.
Comparing Single-File Scans to Full Scans
A single-file scan is quick and focused, but it only checks what you explicitly select. A full scan checks every file, running process, and startup entry—it is the most thorough but can take an hour or more on a large drive. A quick scan (the default in Windows Security) checks common malware locations like startup folders and registry keys, but not every file.
For most routine checks, a quick scan is sufficient. Use a single-file scan when you have a specific item of concern. Use a full scan if you suspect a widespread infection or after a serious security event. The right-click scan is not a substitute for regular scheduled scans; it is a targeted tool.
Safety Tips and Limitations
No antivirus is perfect. A single-file scan will not detect malware that is already running in memory or that has hidden itself in system files. If you suspect an infection beyond a single file, run a full scan or use Windows Defender Offline scan (available in Windows Security under “Scan options”).
Also, be aware that some legitimate programs may be flagged as threats (false positives). If you are certain a file is safe, you can allow it, but only do so if you trust the source. Always keep Windows Security definitions up to date by enabling automatic updates.
Frequently Asked Questions
Can I scan a single file without opening Windows Security?
Yes, the right-click context menu option is the fastest way. If it is not available, you can use the Custom scan in Windows Security or PowerShell as described above.
Does scanning a single file cost anything?
No, Windows Security is built into Windows 10 and 11 and is free. The right-click scan option is part of that built-in protection.
What if the right-click “Scan with Microsoft Defender” is missing?
This usually means a third-party antivirus has taken over real-time protection. You can still use the Custom scan in Windows Security, or temporarily disable the third-party antivirus to restore the context menu (not recommended unless necessary).
How long does a single-file scan take?
It depends on the file size and your system speed. A typical small file takes a few seconds; a large folder with thousands of files could take a few minutes. You can continue working while the scan runs.
Will the scan delete the file if it finds a threat?
No, it will not delete it automatically. Windows Security will show the threat and ask you to choose an action—quarantine, remove, or allow. Quarantine is the safest option because it isolates the file without deleting it permanently.
Can I scan a file on an external drive or USB?
Yes, you can right-click the drive or a specific folder on it and choose the scan option. The scan will include all files on that drive or in that folder. This is a good way to check external media for malware before opening files.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.