How to Remove a Virus from Windows

Remove malware from Windows with antivirus scans, safe mode boot, and system restoration. Step-by-step virus removal guide.

1. Disconnect from the internet immediately. Unplug your Ethernet cable or disable Wi-Fi to prevent the malware from spreading or communicating with remote servers. Press the Windows key + A to open Quick Settings, then toggle Wi-Fi off. If using Ethernet, physically disconnect the cable from your computer.
2. Boot into Safe Mode with Networking. Restart your computer. As Windows loads, press F8 or Shift + F8 repeatedly. Select Safe Mode with Networking from the boot menu. Safe Mode limits startup processes and disables third-party drivers, preventing malware from running while allowing antivirus access to network resources.
3. Run Windows Defender offline scan. Open Windows Security by pressing Windows key + I, selecting Privacy & security > Virus & threat protection. Click Scan options, select Microsoft Defender Offline scan, then click Scan now. Your computer will restart and scan before Windows loads, catching persistent malware that regular scans miss.
4. Run a full antivirus scan with Windows Defender. After the offline scan completes and Windows restarts, open Windows Security again. Go to Virus & threat protection > Scan options, select Full scan, then click Scan now. Let the scan complete fully. Windows Defender will quarantine or remove detected threats automatically.
5. Remove startup programs and extensions. Press Ctrl + Shift + Esc to open Task Manager. Click the Startup tab and disable any unknown or suspicious programs. Then open Settings > Apps > Apps & features, search for unfamiliar applications, click them, and select Uninstall. Finally, check your browser extensions in Chrome, Edge, or Firefox and remove anything unfamiliar.
6. Reset your browser and clear cached data. In Edge, open Settings > Privacy & clear browsing data > Choose what to clear > select all categories > Clear now. For Chrome, go to Settings > Privacy > Clear browsing data > select all time and categories > Clear data. Reset your homepage and search engine in each browser's settings to remove hijacker changes.
7. Verify the infection is removed and reconnect. Open Windows Security one final time. Check Virus & threat protection to confirm no threats are listed. Restart your computer normally (not in Safe Mode). Once Windows loads, reconnect to the internet and run one more quick scan to ensure nothing has reinfected your system.