How to Remove Malware From a Windows PC

If your PC starts acting strange, you may have malware. This guide shows how to remove malware from a Windows PC using simple steps that work on Windows 10 and Windows 11. These steps help you regain control, secure your data, and return your system to a clean, working state.

Remove Malware From a Windows PC Fast

To remove malware from a Windows PC, first disconnect from the internet. Then boot into Safe Mode and run a full scan with Microsoft Defender. If anything remains, run a second scanner and remove the threats it finds.

Check for Infection Signs

Check for malware signs early so the damage does not get worse.

Slow performance and crashes

If your PC slows down during simple tasks, malware may be using your system in the background. Some malware keeps running even when you are not using it. That can make your fan louder, open programs slower, and the whole PC feel heavy. If the problem started after a download or email attachment, treat it as a warning sign.

Pop-ups, redirects, and new toolbars

Browser malware can change your search results and send you to bad sites. Browser malware can also change your search engine, add new tabs, or show fake alerts. If your browser keeps sending you to pages you did not choose, remove the bad extension and reset the browser settings.

Unknown apps and startup items

Malware often hides in fake apps or startup programs. Check for apps you do not remember installing. Some malware hides under names that look normal, so if you are not sure, search the name before deleting anything.

Security alerts you did not install

Only trust security alerts from Windows or your antivirus. Fake alerts often try to trick you into downloading more programs that do not help.

Disconnect and Isolate

Isolation helps stop malware from spreading or sending data out.

Turn off Wi-Fi and Ethernet

This stops malware from talking to other computers or servers. It cuts the connection that allows hackers to see your files or steal your data.

Stop syncing cloud drives

Pause cloud sync so the malware does not spread to other devices. This prevents the infection from reaching your synced files and photos.

Avoid logging into sensitive accounts

Do not log into banking or email accounts until the PC is clean. Many threats track what you type to steal passwords and personal info.

Boot Into Safe Mode

Safe Mode starts Windows with only basic tools. This can stop many malware files from running.

Safe Mode on Windows 11

1. Go to Settings > System > Recovery.
2. Find Advanced startup and click Restart now.
3. Choose Troubleshoot > Advanced options > Startup Settings > Restart.
4. Press 4 or F4 on your keyboard to enter Safe Mode.

Safe Mode on Windows 10

1. Click Start and select Power.
2. Hold the Shift key and click Restart.
3. Follow the menu path: Troubleshoot > Advanced options > Startup Settings > Restart.
4. Press 4 or F4 to launch in Safe Mode.

What to do if Safe Mode fails

If Safe Mode does not open, use a bootable USB made on a clean computer.

Run Microsoft Defender

Microsoft Defender is built into Windows and can remove many common threats.

Full scan vs quick scan

A quick scan checks common infection areas. A full scan checks more files and takes longer. Choose a full scan to reach deep files where malware likes to hide.

Scan history and quarantine

Defender shows the threats it finds and moves them to quarantine. Quarantine keeps the bad files in a safe place where they cannot run or hurt your PC.

Microsoft Defender Offline

This restarts Windows and scans before many malware files can start. This is the best way to catch hidden threats that try to start when Windows turns on.

Use MSRT

MSRT is a free Microsoft tool that removes some common malware. MSRT is useful because it works as a second cleanup step after Defender. It is not made to replace a full antivirus, but it can still catch common threats that are already known to Microsoft. If you are helping an older PC or a family computer, this step is worth doing every time.

What MSRT removes

MSRT is best for malware that is common and widespread.

How to launch it

Press Windows Key + R, type mrt into the box, and hit Enter.

When to use it after Defender

Run MSRT after Defender to check for anything Defender may miss.

Try a Second Scanner

Run a second scanner to check for anything the first scan missed. A second scanner is important when the first scan removes some threats but the PC still acts strange. One tool may catch adware while another finds spyware or hidden browser changes. This extra scan gives you a better chance of finding leftover files that can bring the malware back.

Malwarebytes

Malwarebytes is good for a second scan and can find adware and spyware.

Emsisoft Emergency Kit

This tool works without full installation, so it is useful on damaged PCs.

Sophos Scan & Clean

This tool can help find hidden threats, adware, or browser changes that another scan may miss.

When to run a second opinion scan

Run a second scan if the PC still feels slow or strange after the first cleanup.

Remove Browser Hijackers

Some malware stays in the browser even after a scan.

Delete suspicious extensions

Remove any toolbar or add-on you do not recognize.

Reset Chrome, Edge, or Firefox

Reset the browser to remove bad settings and search changes.

Restore homepage and search engine

Malware can change these settings without permission.

Clean Startup Items

Malware often tries to restart itself every time you power on your PC.

Task Manager startup tab

Disable any program you do not know.

Scheduled tasks

Check Task Scheduler for jobs that start strange files.

Suspicious services

Look for services with strange names or no clear publisher.

Clear Temp Files

Temporary files can keep small malware parts on your PC.

Windows temp folders

Press Windows Key + R, type %temp%, and delete all files in the folder.

Browser cache and download folders

Clear browser cache and cookies to remove bad stored data.

What not to delete

Skip files Windows says are in use.

Repair Windows Files

Malware can break Windows files and make the PC unstable. If malware damaged Windows files, the PC may crash, freeze, or show strange errors even after the threat is gone. SFC checks the system files and fixes broken ones. DISM helps repair Windows itself, which can solve deeper file problems.

Run SFC

This command checks Windows files and fixes broken ones.

Run DISM

This helps repair Windows system files from the inside.

Use System Restore

This can bring your PC back to an earlier clean state.

Back Up and Reset

If the PC still acts infected, a clean reinstall may be the safest choice. If the PC keeps getting infected, a clean reset may save time. Before resetting, copy only your personal files like photos, documents, and school or work files. After the reset, install Windows updates first, then download your apps one by one from trusted sites.

When a clean reinstall is the best option

Use this option if scans do not fix the problem.

What files to back up first

Back up only documents, photos, and work files. Do not back up programs.

How to avoid reinfecting the system

Only download programs from official, verified websites.

Protect Your PC

Good habits help stop malware from coming back. To stay safe, avoid random downloads, fake update prompts, and unknown email attachments. Keep your browser updated too, because browser bugs can also let malware in. If you use public Wi-Fi, avoid logging into sensitive accounts unless you trust the network.

Turn on automatic updates

Keep Windows and apps updated to close security holes.

Keep Defender active

Keep Defender on unless a trusted tool needs it off for a short time.

Use strong passwords and MFA

Use strong passwords and turn on extra login protection.

Maintain offline backups

This gives you a safe copy if malware locks your files.

Key Takeaways

• Fastest removal: Disconnect from the internet and enter Safe Mode immediately.
• Best tip: Run Microsoft Defender first, then run a second scanner to catch leftovers.
• Next step: If the PC still has problems, reset Windows and start fresh.

Follow these steps in order to make sure your PC is fully clean and safe to use again. Tell me your Windows version and the problem you are seeing, and I can help with the next step.

Common Questions

Can malware survive a reset?

A full reset removes most malware and is often the best final step. Rare deep infections can stay, but that is uncommon for normal users.

Is Microsoft Defender enough?

For most users, Microsoft Defender is enough when Windows stays updated and scans are run regularly.

Should I pay for a premium antivirus?

For most users, free built-in protection is enough.

How do I know the malware is gone?

You are likely clean when scans come back clear, pop-ups stop, and the PC runs normally again.

Should I scan my backup files too?

Yes, always scan your backup files before you move them back to your clean PC to ensure you are not bringing the infection back.

Recommended For You:
How to Recover Deleted Emails in Gmail: Complete Step-by-Step Guide
Google Account Recovery Not Working: Fix It Step by Step

Disclaimer
This article is for informational and educational purposes only and does not replace professional tech support. We are not liable for any data loss or system damage during the process. Some images may be AI-generated for illustrative purposes. All copyrights, trademarks, and logos mentioned in this article belong to their respective owners. Please proceed with caution when modifying your system.