If your PC is running slow, showing pop-ups, or behaving strangely, it might be infected with malware. Do not panic. This guide walks you through removing malware safely, step by step, without losing your files.
Step 1: Disconnect from the Internet
Malware often communicates with command-and-control servers. Disconnecting prevents it from spreading, downloading more malicious files, or encrypting your data with ransomware.
Step 2: Boot into Safe Mode
Safe Mode loads only essential Windows files, preventing malware from starting automatically. Press F8 during boot (or Shift+Restart on Windows 10/11) to access Safe Mode.
Step 3: Run a Full Antivirus Scan
Use your installed antivirus to run a full system scan. If you do not have one, download a reputable scanner like Malwarebytes or Kaspersky Virus Removal Tool from another device. For recommendations, see our best free antivirus guide.
Step 4: Delete Temporary Files
Malware often hides in temp folders. Use Disk Cleanup or CCleaner to remove temporary files, browser cache, and downloads. This also frees up space and speeds up scans.
Step 5: Check Browser Extensions and Startup Programs
Open Task Manager (Ctrl+Shift+Esc), go to the Startup tab, and disable suspicious programs. In your browser, remove extensions you do not recognize. Many malware infections start as fake browser extensions.
Step 6: Reset Your Browser Settings
If your browser redirects to strange sites or shows unwanted ads, reset it to default settings. This removes malicious extensions, toolbars, and changed search engines.
Step 7: Update Everything
Outdated software is a common malware entry point. Update Windows, your browser, and all applications to the latest versions. Enable automatic updates to stay protected.
Step 8: Prevent Future Infections
After cleaning your PC, prevent reinfection by installing a reputable antivirus with real-time protection, keeping your OS and software updated, avoiding suspicious downloads, and using a VPN on public Wi-Fi (see our beginner VPN guide).
When to Seek Professional Help
If malware has encrypted your files (ransomware), disabled your antivirus, or persists after following these steps, consult a professional. Some infections are too deep for manual removal.
