Malware protection is a critical aspect of maintaining the security and integrity of Windows systems. Windows offers several built-in tools and features that can help protect against malware threats. This article will guide you through practical steps and examples to enhance malware protection on your Windows environment.

1. Enable Windows Defender Antivirus

Windows Defender Antivirus is a built-in feature in Windows 10 and Windows 11 that provides real-time protection against malware. To ensure it's enabled:

• Open the Start menu and type "Windows Security."
• Select "Windows Security" from the search results.
• Click on "Virus & threat protection."
• Ensure that "Real-time protection" is turned on.

2. Use PowerShell to Update Windows Defender

Keeping Windows Defender updated is crucial for effective malware protection. You can use PowerShell to manually update it:

# Open PowerShell as an administrator
Update-MpSignature

This command will update the malware definitions to the latest version.

3. Schedule a Full System Scan

You can schedule a full system scan using Task Scheduler:

• Open Task Scheduler by typing "Task Scheduler" in the Start menu.
• Click on "Create Basic Task" in the Actions pane.
• Name your task and click "Next."
• Choose "Daily" and set your preferred time.
• Select "Start a program" and click "Next."
• In the "Program/script" box, type:

  C:\Program Files\Windows Defender\MpCmdRun.exe

• In the "Add arguments" box, type:

  -Scan -ScanType 2

• Click "Finish" to schedule the task.

4. Use CMD to Check for Malware

You can also use the Command Prompt to run a quick scan:

• Open Command Prompt as an administrator.
• Type the following command and press Enter:

  "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Scan -ScanType 1

This command will perform a quick scan of your system.

5. Enable Controlled Folder Access

Controlled Folder Access helps protect your files from unauthorized changes by ransomware. To enable it:

• Open "Windows Security" and click on "Virus & threat protection."
• Click on "Manage ransomware protection."
• Turn on "Controlled folder access."

Examples:

• PowerShell Update Command:

  Update-MpSignature

• CMD Quick Scan Command:

  "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Scan -ScanType 1