How to Remove Malware From PC Step by Step

Remove malware from PC hardware before it spreads further, wipes files, or steals personal information saved locally.

Most infections do not announce themselves with a warning screen.

They show up as a browser that suddenly redirects to strange pages, a fan that spins constantly even when nothing is open, or a login password that stops working for no clear reason.

The methods below start with the safest, most reliable options and move toward the more technical fixes you would only need if the basic scans come up empty.

1. Spot the Signs of an Active Infection

Before running anything, it helps to confirm what you are actually dealing with.

A machine that has been compromised usually shows a mix of these symptoms rather than just one:

• Programs opening on their own or new toolbars appearing in the browser
• A noticeable drop in speed, especially right after startup
• Pop up ads showing up even when no browser window is open
• Antivirus software that has been disabled without you touching it
• Unfamiliar apps in the list of installed programs
• Friends or contacts receiving messages from your accounts that you never sent

If two or three of these sound familiar, treat it as an active infection rather than a one off glitch and work through the steps in order.

2. Disconnect From the Network First

Cut the internet connection before doing anything else.

Unplug the ethernet cable or turn off Wi Fi from the settings menu.

A lot of malware relies on a live connection to send stolen data out or pull down additional malicious files.

Working offline during the initial cleanup limits what the infection can do while you deal with it, and it also stops it from reinfecting a file you just cleaned.

3. Boot Into Safe Mode

Safe mode loads Windows with only the essential drivers and services running, which means most malware processes never get the chance to start.

On Windows 10 and 11, open Settings, go to System, then Recovery, and select Restart now under Advanced startup.

Once the machine reboots into the blue troubleshooting menu, choose Troubleshoot, then Advanced options, then Startup Settings, and press restart again.

From the numbered list that appears, pick Safe Mode with Networking only if you specifically need internet access for a scanning tool, otherwise choose plain Safe Mode.

Running your scans from this stripped down environment gives them a much better shot at catching and removing files that would normally lock themselves against deletion while Windows runs normally.

4. Run a Full Scan With Windows Defender

Windows Defender, now labeled Microsoft Defender Antivirus, is already installed and does a competent job on its own.

Open Windows Security from the Start menu, select Virus and threat protection, then Scan options, and choose Full scan rather than Quick scan.

A full pass checks every file on the drive instead of just the common infection points, so expect it to take anywhere from thirty minutes to a couple of hours depending on how much data is stored.

If Defender finds anything, let it quarantine or remove the file automatically.

Reboot afterward even if it does not explicitly ask you to, since some removals only complete on the next restart.

5. Install and Run a Dedicated Malware Scanner

Built in antivirus tools are good at catching known viruses but often miss adware, browser hijackers, and potentially unwanted programs that technically are not viruses in the traditional sense.

Malwarebytes is the tool most professionals reach for as a second opinion because its detection engine is built specifically around this gray area of software.

Download the free version from the official malwarebytes.com site only, since search results for this exact name are frequently flooded with fake download pages.

Install it, update its definitions if prompted, and run a full scan.

Quarantine everything it flags, then restart the computer once more.

6. Check Installed Programs for Anything Unfamiliar

Open Settings, then Apps, and scroll through the full list sorted by install date.

Malware frequently rides in bundled with free software downloads, showing up as toolbars, PC optimizer tools, or media players you never intentionally installed.

If a name looks unfamiliar or was installed around the same time your symptoms started, uninstall it.

When in doubt, a quick search of the exact program name will usually tell you within a minute whether it is legitimate or known adware.

7. Remove Malicious Browser Extensions

Browsers are one of the most common entry points, and a compromised extension can keep reinfecting a system even after the rest of it is clean.

In Chrome, type chrome://extensions into the address bar and remove anything you do not remember installing.

In Firefox, go to about:addons.

In Edge, use edge://extensions.

Pay close attention to extensions that request broad permissions like reading and changing all your data on every website, since that level of access is rarely necessary for what most extensions actually do.

8. Reset Browser Settings to Default

If redirects or unwanted new tab pages persist after removing extensions, reset the browser entirely.

In Chrome, go to Settings, then Reset settings, and choose Restore settings to their original defaults.

Firefox offers a similar Refresh Firefox option under Help, then More troubleshooting information.

This clears altered homepage settings, default search engines, and startup pages without deleting your saved bookmarks.

9. Clear Temporary Files and Cached Data

Temporary files sometimes hold on to remnants of a cleaned infection or slow the system down enough that it feels like malware is still present even after removal.

Open the Disk Cleanup tool by searching for it in the Start menu, select the system drive, and check temporary files, thumbnails, and the recycle bin.

On newer versions of Windows, Settings then System then Storage offers a more detailed version of the same cleanup with additional categories like Windows Update leftovers.

10. Update Windows and All Installed Software

Outdated software is one of the easiest ways for malware to get back in even after a clean scan.

Go to Settings, then Windows Update, and install everything available, including optional driver updates.

Then check commonly targeted programs individually, particularly web browsers, Java, and any PDF readers, since these are frequent targets for exploit kits that install malware silently through unpatched security holes.

11. Review Startup Programs and Scheduled Tasks

Some infections rebuild themselves after every restart using scheduled tasks or startup entries you would never notice otherwise.

Open Task Manager, go to the Startup tab, and disable anything unfamiliar or unnecessary.

For a deeper check, open Task Scheduler from the Start menu and look through the Task Scheduler Library for tasks with vague or randomly generated names, especially ones set to run at every login or at short recurring intervals.

Right click and disable anything suspicious rather than deleting it outright, in case it turns out to be tied to legitimate software.

12. Know When It Is Time to Reinstall Windows

If symptoms return after multiple scans and cleanups, or if the infection turns out to be ransomware or a rootkit, a clean reinstall of Windows is often faster and more reliable than continuing to chase it manually.

Back up personal files to an external drive first, but scan that backup separately before restoring it, since copying an infected file back onto a freshly reinstalled system defeats the entire point.

Use the Reset this PC option under Settings, then Recovery, and choose Remove everything for the most thorough result.

Frequently Asked Questions

Can malware survive a full factory reset?

In almost all cases, no.

A factory reset wipes the operating system drive completely, and standard malware cannot survive that.

The rare exception involves firmware level infections that target the BIOS or UEFI directly, which are extremely uncommon outside of targeted attacks on high value systems.

Is it safe to keep using the computer while running a scan?

It is generally fine to keep working during a scan, though performance will be noticeably slower since the scanner is reading every file on the drive.

Avoid entering passwords or accessing sensitive accounts until the scan finishes and comes back clean, since an active infection could still be logging keystrokes during that window.

Why does my antivirus say the system is clean but problems continue?

This usually points to a potentially unwanted program rather than a traditional virus, since many antivirus tools are tuned to ignore borderline adware and bundled toolbars by default.

Running a dedicated tool like Malwarebytes alongside your regular antivirus often catches what the first scan missed.

Should I pay for a premium antivirus after this happens?

A paid antivirus adds real time protection, better phishing detection, and faster response to brand new threats, which the free version of Windows Defender handles adequately but not exceptionally.

If this is not the first time you have dealt with an infection, the extra layer of protection is a reasonable investment.

How long should a full malware scan take?

Expect thirty minutes at minimum, and up to a few hours on drives with a large amount of stored data or an older, slower hard drive rather than a solid state drive.

Let it run to completion rather than interrupting it partway through, since a partial scan can miss files entirely.