Windows’s built-in security software frequently beats paid antivirus programs in independent tests.

Well explain how to unlock them.

This checks only the folders in which threats are most commonly found.

Gboard’s editing mode on an Android phone.

SelectVirus & threat protectionand clickQuick scan.

To scan more thoroughly, clickScan optionsand chooseFull scan, which checks every file and program on your PC.

Alternatively, selectCustom scan, which lets you check specific files and folders for malware.

Lenovo laptop showing file explorer in Windows 11

This targets malware thats difficult to detect, such as rootkits.

stash your work before choosing this option, then clickScan now>Scan,and your PC will restart.

The scan takes up to 15 minutes.

an xbox controller with xbox game pass on a screen in the background

Dont panic if your screen goes black for a few seconds, as this is normal.

Fortunately, the feature is easy to enable.

On theVirus & threat protectionscreen, scroll down toRansomware protectionand clickManage ransomware protection.

windows defender security notification on laptop screen

hit the switch underControlled folder accessto turn the option on.

This uploads details of suspicious files to Microsoft, to determine whether theyre safe.

You should see a warning if this is the case.

Run a quick scan using Windows Security

You should also turn onAutomatic sample submissionto submit suspicious files to Microsoft for further analysis.

This may sound like a privacy risk, but it will only upload program files automatically.

If a file could contain personal information, youll be asked for permission before its sent.

Click on the Scan now button

Think of it as doing your bit for the security community.

Prior to this, you had to resort to PowerShell commands just to block these pesky annoyances.

To ensure these new tools are offering maximum protection, selectApp & surfing app controlin Windows Security.

Enable ransomware protection

ClickTurn onunderReputation-based protectionif prompted, then clickReputation-based protection options.

TheCheck apps and filesoption uses Microsoft Defender SmartScreen to stop unrecognized and untrustworthy programs running on your PC.

However, unless you use Edge, the second SmartScreen option can be switched off.

switch on Cloud-delivered protection

ClickFirewall & data pipe protectionin Windows Security and ensure that theDomain,Private, andPublicoptions are all switched on.

The firewall uses “rules” against which all internet traffic is checked.

This is whereConfigureDefendercomes in useful.

Reputation-based protection settings in Windows Security

ConfigureDefender is very easy to use, with one-click options that applyDefault,High, orMaxprotection to Microsoft Defender.

Youll need to cycle your PC for its changes to take effect.

Windows Defender Firewall advanced security

ConfigureDefender settings