Enabling Windows defender to block USB Malware automatically

Question

I want to turn on the Windows Defender Option preventing malware spreading from USB stick.

Answer 1

1. Make sure autoplay is turned off for USB drives.

How To Geek

2. Change a Windows Defender Setting and create a scheduled task to auto scan devices when they are plugged in.

answers.microsoft.com

Answer 2

Option 1 To Enable or Disable Scan Removable Drives during Full Scan in PowerShell

1. Open an elevated PowerShell.

2. Enter the command below you want to use into PowerShell, and press Enter.

(Enable) Set-MpPreference -DisableRemovableDriveScanning 0

OR

(Disable) Set-MpPreference -DisableRemovableDriveScanning 1

3. When finished, you can close PowerShell if you like.

Option 2 To Enable or Disable Scan Removable Drives during Full Scan using a registry key

Locate the registry key as below and modify the DWORD value to 0 or 1.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan

DisableRemovableDriveScanning DWORD

0 or (delete) = enable scan 1 = disable scan