Home / Antivirus

How to remove malware from Windows

9 min read · Updated November 2026

Slowdowns, strange pop-ups and a changed browser homepage can point to malware, though not always. Work through these steps in order.

Common warning signs

• Browser opens unwanted tabs or changes your search engine.
• Programs you did not install appear.
• Security settings turn themselves off.
• The PC is suddenly slow with high disk or CPU use and nothing running.

Step by step

1. Disconnect from the internet by turning off Wi-Fi or unplugging the cable. This can stop data leaving the PC.
2. Restart in Safe Mode with Networking. Settings, System, Recovery, Advanced startup, Restart now, then Troubleshoot, Advanced options, Startup Settings, and choose Safe Mode.
3. Run a Full scan in Windows Security and remove or quarantine what it finds.
4. Run an Offline scan. In Virus & threat protection, choose Scan options, then Microsoft Defender Offline scan.
5. Add a second opinion. Reconnect, download Malwarebytes Free from its official site and run a scan.
6. Uninstall unknown apps in Settings, Apps, Installed apps. Sort by install date to spot recent arrivals.
7. Clean your browser. Remove unknown extensions, reset the homepage and search engine, and clear notification permissions you did not intend to give.
8. Change passwords for email, banking and shopping using a different, clean device first.
9. Restart normally and run a Quick scan again to confirm the result.

If it keeps coming back

Back up your documents to an external drive, then use Settings, System, Recovery, Reset this PC. A reset is the surest cleanup. Scan your backup files before restoring them.