How to Remove Malware from Windows (10 & 11): Step-by-Step

If your Windows PC has become slow, throws pop-ups, redirects your browser, or your antivirus was mysteriously turned off, malware is a likely cause. The good news is that most infections on Windows 10 and 11 can be removed with built-in tools and one reputable on-demand scanner, without paying anyone or reinstalling. This guide walks through it step by step, in the right order.

Signs your Windows PC has malware

• It is suddenly slow, freezes, or the fan runs constantly when idle.
• Pop-ups or ads appear on the desktop or on sites that normally have none.
• Your browser homepage, search engine, or new-tab page changed on its own.
• Programs you did not install appear, or your antivirus is disabled and will not turn back on.
• You are redirected to unexpected sites, or friends receive messages you did not send.

Step 1 - Disconnect and note what you can

Disconnect from the internet (unplug Ethernet or turn off Wi-Fi) to stop malware from communicating out or downloading more. If you have important files that are not backed up, this is a good moment to be aware of them, but do not run unknown “cleaner” tools that a pop-up is urging on you.

Step 2 - Boot into Safe Mode with Networking

Safe Mode starts Windows with only essential drivers, which stops most malware from loading so you can remove it.

1. Open Settings → System → Recovery and, under Advanced startup, select Restart now.
2. After the reboot, choose Troubleshoot → Advanced options → Startup Settings → Restart.
3. When the list appears, press 5 or F5 for Safe Mode with Networking (you need networking to update your scanner).

Step 3 - Uninstall suspicious programs

Malware often installs a normal-looking Windows app.

1. Open Settings → Apps → Installed apps.
2. Sort by install date and look at what arrived when the trouble started.
3. Uninstall anything you do not recognize, especially fake “optimizers,” “coupon” or “deals” tools, unknown media players, or toolbars.

If something refuses to uninstall, note the name and move on; the scan in Step 4 usually handles it.

Step 4 - Run a full scan with a reputable remover

Use an on-demand scanner plus Windows’ own offline scan. A common, effective pairing:

1. Install and update Malwarebytes (the free version scans and removes on demand), then run a full scan and quarantine what it finds.
2. Then run Microsoft Defender Offline: Settings → Privacy & security → Windows Security → Virus & threat protection → Scan options → Microsoft Defender Antivirus (offline scan). It reboots and scans before Windows fully loads, which catches things that hide during normal use.

Reboot normally after both scans complete and confirm the symptoms are gone.

Step 5 - Clean up your browsers

Browser hijackers survive an app uninstall by living in the browser.

• Remove unfamiliar extensions in Chrome, Edge or Firefox.
• Reset your homepage, default search engine and new-tab page to what you want.
• If ads persist, reset the browser to its default settings (this keeps bookmarks but clears hijacked settings).

Step 6 - Check startup items

Some malware relaunches itself at boot.

• Open Task Manager (Ctrl+Shift+Esc) → Startup apps and disable anything suspicious.
• Advanced users can check Task Scheduler for odd tasks that re-run a removed program.

When to consider a reset

If scans keep finding the same threat, the machine still misbehaves, or you cannot regain control of your antivirus, a clean Reset this PC (Settings → System → Recovery) with the “Remove everything” option is the surest fix. Back up your personal files first, and reinstall apps from official sources afterwards.

How to stay clean

• Keep Windows and your browser updated; many infections exploit old versions.
• Install software only from official sites or the Microsoft Store, and decline bundled “extras” during setup.
• Do not open unexpected attachments or click “your PC is infected” pop-ups.
• Keep real-time protection on (Windows Defender is capable) and run an occasional second-opinion scan.

FAQ

Can Windows Defender remove malware on its own? Often yes. Its real-time protection plus the offline scan handle a lot. Pairing it with an on-demand remover like Malwarebytes for a second opinion catches more stubborn cases.

Do I need to reinstall Windows to remove a virus? Usually not. Safe Mode plus a full scan and an offline scan clear most infections. A reset is a last resort for persistent or system-level threats.

Is malware removal free? Yes for most home cases: Windows Defender is built in, and Malwarebytes offers free on-demand scanning and removal. Paid suites add real-time and web protection.

How do I remove malware without any software? You cannot reliably do it with zero tools, but you can go a long way with only the built-in ones: Safe Mode, uninstalling suspicious apps, Defender Offline, and resetting your browser.

Editorial guide based on documented Windows 10/11 features and standard removal practice. Steps reflect Microsoft’s own tools and reputable free scanners; menu paths can shift slightly between Windows versions.