How to Remove a Virus From Your Computer: Step-by-Step

Pop-ups everywhere, a browser homepage you did not choose, programs crashing, the fan screaming at idle — these are the classic signs of malware. Knowing how to remove virus from computer systems safely matters because panicking and clicking the first “free virus remover” ad you see is exactly how many infections start.

Follow these steps in order. Do not skip ahead: each step builds on the last, and rushing to deletion before containing the infection can make things worse.

How to Remove Virus From Computer Step 1: Disconnect and Assess

First, disconnect from the internet — unplug Ethernet or turn off Wi-Fi. This stops the malware from sending your data out, downloading reinforcements, or spreading to other devices on your network. Do not shut the computer down yet; some malware hooks into the boot process, and you want to handle removal while the system is in a known state.

Next, assess what you are dealing with. Browser hijackers change your homepage and search engine. Adware floods you with pop-ups. Ransomware encrypts your files and demands payment — if you see a ransom note, stop here, do not pay, and consider professional help, because improper handling can destroy any chance of recovery. Keyloggers and trojans are quieter; sluggish performance and strange network activity are their tells.

Step 2: Boot Into Safe Mode

Safe Mode loads Windows with only essential drivers and services, which prevents most malware from launching and locking its files. On Windows 10 and 11, hold Shift while clicking Restart, then navigate to Troubleshoot, then Advanced options, then Startup Settings, and choose Safe Mode with Networking (you will need networking to download tools if you do not have them already).

On a Mac, shut down, then power on while holding Shift (Intel Macs) or holding the power button until startup options appear, then holding Shift while selecting your disk (Apple silicon). Mac malware is rarer but real, and Safe Mode similarly prevents it from loading at boot.

Step 3: Run Scans and Remove the Threats

In Safe Mode, run a full scan with your built-in protection first: Windows Security (search for it in the Start menu) on Windows, which is genuinely good in 2026. Then run a second-opinion scanner — Malwarebytes Free is the gold standard here — because no single scanner catches everything.

Let the scans finish completely, then quarantine or remove everything they find. If Malwarebytes finds threats Windows Security missed (or vice versa), that is normal — different engines, different detection. After removal, restart normally and run both scans once more to confirm the system is clean. If infections keep reappearing after reboot, the malware has a persistence mechanism, and it is time for the nuclear options below.

Step 4: Clean Up the Damage Malware Leaves Behind

Removal is only half the job. Check your browsers: reset settings to default in Chrome, Edge, or Firefox to evict hijacked homepages, rogue extensions, and modified search engines. Review installed programs and browser extensions for anything you do not recognize — malware often bundles “helper” programs that scanners miss.

Then change your passwords, starting with email, banking, and social media — assume anything typed on the infected machine was captured. Do this from a clean device, not the one you just disinfected, and enable two-factor authentication everywhere it is offered. Finally, check your router: some malware changes DNS settings, so log into your router admin page and confirm the DNS servers are your ISP’s defaults or a trusted public resolver.

How to Remove Virus From Computer When Scans Fail: The Nuclear Options

If malware survives Safe Mode scans, you have two reliable fallbacks. A rescue disk scan — booting from a USB drive with antivirus tools that run outside your infected operating system — catches rootkits that hide from in-OS scanners. Most major antivirus vendors offer free rescue disk images.

The final option is a clean OS reinstall: back up your personal files (documents, photos — not programs), then wipe the drive and reinstall Windows or macOS from official media. This removes everything, including deeply embedded malware, with near certainty. It is drastic, but for ransomware or banking trojans, it is the only approach security professionals fully trust.

FAQs

Q: Can Macs get viruses?

A: Yes. Mac malware is less common than Windows malware, but adware, trojans, and browser hijackers target macOS regularly. Keep macOS updated and be skeptical of software downloaded outside the App Store.

Q: Should I pay for antivirus software?

A: For most users, no. Windows Security plus Malwarebytes Free for second opinions covers typical needs. Paid suites add value mainly through extras like VPNs and identity monitoring, not meaningfully better core protection.

Q: How did I get infected if I have antivirus?

A: The usual routes: pirated software, malicious email attachments, fake “update” pop-ups, and compromised ads on legitimate sites. Antivirus is a seatbelt, not a force field — cautious browsing habits matter more.

Q: The virus keeps coming back after removal. What now?

A: It has a persistence mechanism — a scheduled task, a compromised restore point, or a rootkit. Try a rescue disk scan, and if that fails, back up your files and do a clean OS reinstall.