Virus & Malware Removal · 8 min read
How to Remove Malware From a Windows PC
Malware removal is a process, not a button. Work through these steps in order; skipping to the end is how reinfections happen.
Published 2026-08-09 · Last updated 2026-08-09
1. Disconnect and stop the bleeding
Unplug the Ethernet cable or turn off Wi-Fi. This stops data exfiltration and prevents downloaders from fetching further payloads. Do not log into any accounts from this machine until it is clean.
2. Run an offline scan
Windows Security → Virus & threat protection → Scan options → Microsoft Defender Offline Scan. Scanning before Windows fully loads defeats most persistence tricks.
3. Run a second-opinion scanner
Reconnect only long enough to download the free Malwarebytes scanner from the official site, then disconnect again, update and run a full scan. Quarantine everything it finds.
4. Clean the browser layer
Most visible symptoms — new search engines, injected ads, redirects — live in browser extensions and profile settings, not in the file system. Remove every extension you did not deliberately install, then reset browser settings to default.
5. Check persistence points
Review Task Manager → Startup apps, Task Scheduler for unfamiliar tasks, and Settings → Apps for programs installed on the date the trouble began. Remove what you can positively identify as unwanted.
6. Change passwords and verify
From a different, trusted device, change passwords for email, banking and any account whose credentials were stored in the browser, and enable multi-factor authentication. Then rescan the cleaned PC and watch it for a few days.
When to reinstall instead
If you found a rootkit, if ransomware encrypted files, or if the machine keeps reinfecting after clean scans, back up your documents and reinstall Windows. A clean install is faster and more certain than an open-ended cleanup.
Frequently asked questions
- Can malware survive a Windows reset?
- Almost never for consumer malware, provided you use the option that removes everything and you do not restore infected executables from your backup.
- Do I need to pay for malware removal?
- Usually not. The free tools described here handle the large majority of home infections.