3.1 Windows Defender (Windows Security Center)

Windows Security (formerly called the Windows Security Center) is the built-in dashboard for Microsoft Defender Antivirus, the Windows Firewall, and related protections on Windows 10/11. It is free, runs quietly in the background, has no ads, and is the recommended default for most home, school, and office PCs. For third-party alternatives, see section 3.2; keep Windows Update current so virus definitions stay fresh.

Why use the built-in protection

• Always installed—no separate subscription or download required.
• Low overhead compared with heavy “security suite” bundles that slow boot and show pop-ups.
• Integrated with Windows Update—malware signatures and engine updates arrive automatically.
• Good detection for typical threats when combined with safe browsing habits.

Open Windows Security

1. Press the Windows key, type Windows Security, press Enter.
2. Or Settings (Win + I):
   • Windows 11: Privacy & security > Windows Security > Open Windows Security.
   • Windows 10: Update & Security > Windows Security > Open Windows Security.
3. Check the shield icon in the taskbar notification area (may be hidden under ^).

Main areas in the app

• Home — Security at a glance

  Summary cards for each module. A green check means no action needed; yellow tiles suggest a setting to review (sign-in security, PUA blocking, etc.).

• Virus & threat protection

  Core antivirus: Quick scan, Full scan, custom scans, and real-time protection. View Protection history for quarantined items. If you install another antivirus, Windows may hand real-time scanning to that product—Defender options may still offer periodic scanning.

  • Quick scan: Minutes—checks common malware locations.
  • Full scan: Hours—every file on fixed drives; run when suspicious or after a risky download.
• Firewall & network protection

  The firewall is on by default—it blocks unauthorized inbound traffic and helps control outbound connections. Profiles: Domain, Private (home/work), Public (coffee shop). The active profile shows (active). Use Allow an app through firewall when a trusted program is blocked; avoid turning the firewall off.

• App & browser control

  Reputation-based protection and blocking of potentially unwanted apps (PUA)—toolbars, bundlers, and “PC optimizers.” Turn PUA blocking on if recommended. Links to Exploit protection and, on supported systems, Microsoft Defender Application Guard for isolated Edge browsing.

• Device security

  Reports Core isolation, memory integrity, and TPM (security processor) status. Wording varies by PC model—some messages are informational, not errors.

• Device performance & health

  Simple health report (storage, battery, apps). Fresh start reinstalls Windows while keeping personal files—advanced; back up first (section 10).

Scan types compared

Run a quick scan (step by step)

1. Open Windows Security > Virus & threat protection.
2. Under Current threats, click Quick scan.
3. Wait for completion; review results under Protection history if threats were found.
4. Choose Start actions or Remove / Quarantine as recommended—when unsure, quarantine is safer than ignore.

Firewall and network profiles

Set profile in Settings > Network & internet > your connection > Properties > Private or Public.

Real-time protection settings

• Real-time protection should stay On—scans files as they are opened or downloaded.
• Cloud-delivered protection and Automatic sample submission improve detection; privacy-conscious users can review Microsoft’s data statements in settings.
• Tamper protection prevents malware from disabling Defender—leave enabled unless IT instructs otherwise.
• Controlled folder access (optional): limits which apps can change files in protected folders—useful against ransomware; may block unfamiliar apps until you allow them.

If you install another antivirus

• Windows usually disables Defender real-time scanning when a third-party product registers—running two real-time scanners causes conflicts and slowdown.
• Windows Security may still show the third-party app as “on” with an Open app link.
• Prefer one reputable product (section 3.2); avoid “PC Cleaner” tools that mimic antivirus.
• If you uninstall third-party AV, confirm Defender real-time protection turns back on automatically.

Security habits beyond the app

• Install Windows Updates promptly—security patches and Defender definition updates depend on them.
• Download software only from official sites or Microsoft Store; decline bundled toolbars.
• Do not open unexpected email attachments; scan USB drives from unknown sources (section 9.3).
• Use strong passwords and 2FA on Microsoft and other accounts.
• Back up important files (section 10)—antivirus cannot recover encrypted ransomware files.

Troubleshooting

• Yellow warnings on Home: Click the tile and follow the suggested fix (often sign-in or PUA settings).
• Defender turned off: Another AV may be active, or Group Policy disabled it—check Virus & threat protection settings.
• App blocked by firewall: Windows Security > Firewall > Allow an app—allow only programs you trust on Private networks.
• Scan stuck or very slow: Close heavy apps; schedule Full scan overnight; ensure definitions are updated (Check for updates on Virus & threat protection page).
• False positive: Use Protection history > Allow on device only if you are certain the file is safe.