5 Steps for Removing Malware from Your Computer

To remove malware from a Windows PC, disconnect it from the internet, restart in Safe Mode, run a full antivirus scan, uninstall suspicious applications and browser extensions, and restore system settings.

Act quickly, because malware can spread and damage your network. The steps below use Windows 10 and Windows 11 menus, and macOS and Linux steps differ.

Note: The steps below focus on Windows 11. Windows 10 version 22H2 reached end of support on October 14, 2025. Eligible devices enrolled in Extended Security Updates (ESU) can continue receiving security updates; LTSC editions follow separate support schedules. Steps for macOS and Linux differ.

A brief look at cyber threats

Alongside programs and software developed to eliminate them, cyber threats continue to evolve. In 2023 alone, 6.06 billion malware attacks were documented, and according to the AV-TEST, the institute registers more than 450,000 new malicious programs and potentially unwanted applications each day. Malicious actors are becoming more sophisticated, using advanced techniques to breach defenses without detection.

Attackers use social engineering techniques, including email phishing and spear-phishing to trick people into sharing sensitive information or opening malicious links and attachments.

Furthermore, artificial intelligence (AI) has entered the scene, both as a defender and an invader. Some advanced malware variants have begun to incorporate AI to evade detection.

Security professionals are working against the clock to deploy intelligent solutions that can recognize malicious patterns before they cause damage. This starts with a good understanding of the distinct methods bad actors can use to compromise systems.

Types of malware

Understanding the different types of malware is essential for effectively addressing security concerns. These include, but aren’t limited to the following:

• Viruses

Named for their biological counterparts, viruses embed themselves within clean files and propagate to infect additional files. Their uncontrolled spread can severely impair a system’s core functionality, leading to the deletion or corruption of files.

• Trojans

Named after the deceptive Trojan horse in the Greek tale, Trojans masquerade as legitimate software but execute malicious activities upon activation. Instead of directly harming the system, they often create backdoors that allow other malware to infiltrate. A remote access Trojan (RAT) is software that, when installed on a victim’s device, allows unauthorized users to control it remotely.

• Spyware

Spyware operates covertly within a system, clandestinely collecting information such as browsing habits, keystrokes, and personal data, often resulting in identity theft. For a visual walkthrough of how spyware infects devices and what protection looks like, consider viewing this video: What Is Spyware? The Various Types & How To Stay Protected.

• Ransomware

This malware encrypts critical data, essentially locking digital doors and demanding payment for decryption, analogous to someone changing locks and requesting payment for keys.

• Adware

While generally less harmful than other types of malware, adware inundates devices with unwanted ads, potentially slowing down computers and serving as a conduit for more severe malware.

To effectively combat all these intruders, you need not only an understanding of their operation but also the ability to identify the specific malware affecting a machine.

Signs of a malware infection

Malware is designed to be subtle, making it challenging to detect. Be aware of the signs that your computer may be infected so that you can be ready to act.

Slow device performance, crashes, or pop-ups

Frequent system slowdowns and crashes are often indications that something isn’t right. Malware programs run background processes that hog your computer’s resources, leading to:

• protracted boot times
• delayed response from software applications, and
• unexpected freezing or the dreaded “blue screen of death (BSOD).”

Pop-up ads can also indicate that you have adware hiding in your system. A simple click could trigger a threat.

Unauthorized access to personal data or systems

Unfamiliar files on your desktop or unexplained changes in system settings could be a result of malware. Other symptoms include:

• new programs launching at startup without your consent
• altered passwords hindering access to your accounts, and
• email contacts receiving messages you did not send

Inexplicable increases in network activity or data usage

An abrupt rise in network activity can indicate unauthorized communications between your device and malicious servers, indicating data transmission or downloading of harmful components onto your machine. Watch for the following:

• significant spikes in internet usage reflected on network tools
• reduced bandwidth availability for legitimate tasks, and
• unusually high data transfer volumes with no user-driven cause

With full awareness of these signs and the vigilance to act upon them, getting malware out of your system, and even preventing it outright becomes much more manageable.

How to remove malware from your PC in 5 steps

If your computer is acting up and you suspect a malware infection, you can reclaim control with five crucial steps to completely remove malware from your PC.

1) Disconnect from the internet to limit the spread

First, disconnect from the internet. Cutting off communication from external networks contains the threat within your device and prevents malware from sending further data to malicious actors or downloading additional harmful payloads.

• If you’re using Wi-Fi, click on the network icon on your taskbar, select your connection, and hit Disconnect.
• For wired connections, simply unplug the Ethernet cable from your PC.

2) Switch to Safe Mode

Next, enter Safe Mode to load only the drivers necessary for your operating system and to keep potential viruses from loading.

1. Hold down Shift while choosing Restart via the Start menu.
2. Once your PC has rebooted, select Troubleshoot > Advanced Options > Startup Settings.
3. On the Startup Settings page, click Restart.
4. After another restart, choose Enable Safe Mode by pressing F4 or 4.

3) Run antivirus software scans

After making sure your antivirus software is fully updated, run a full scan. Full scans take longer than quick scans, but are required to remove the malware present on your system.

4) Uninstall suspicious applications, processes, extensions, or plugins

Remove unwanted applications that appeared just before or during the attack. Here’s how:

• Search for “Control Panel” in Windows and navigate to Programs and then Programs and Features.
• Sort the list by installation date and review anything installed without your authorization or around the time issues began.

In addition, check your browser extensions for unwanted additions:

• In each browser settings menu, look under Extensions or Add-ons.
• Carefully consider whether you recognize each one as legitimate. Any doubt calls for removal.

If you’re not sure about an application or extension, consult online forums or resources to find out what to do before ending them.

5) Restore system settings and files

Once you’ve finished cleaning, you can restore system settings and files:

1. Access System in Settings.
2. Select Recovery.
3. Select Reset this PC to reinstate original settings potentially overwritten by malicious software. In particular, choose Keep my files to retain personal data or Remove everything for a clean reinstall.

If available, use System Restore to return configurations to previous snapshots taken automatically at various points known as restore points.

Quick tips to prevent malware infection

Finally, removing malware and avoiding it in the first place requires a structured, proactive approach to cybersecurity. Here are some quick tips to protect your computer from malicious threats.

• Stay updated: Malicious actors frequently exploit vulnerabilities in outdated software, so ensure that all software, especially your operating system and antivirus program, is up to date with the latest security patches.
• Use strong passwords: Use complex passwords that combine numbers, symbols, and both upper and lowercase letters, and avoid using easily guessable passwords. You can use a reliable password manager to create and store strong passwords for you.
• Be cautious with email attachments: Many malware infections start with an email attachment. If an email seems suspicious or is from an unknown sender, don’t open attachments or click on any links within.
• Enable real-time antivirus protection: Many operating systems come with built-in real-time protection, such as Microsoft Defender for Windows 10/11 PCs, which should be kept enabled unless you’re using a third-party solution.
• Regularly back up your data: Use external drives or cloud storage services to back up your important files regularly. This can save you the hassle of having to restore your data from scratch if your PC gets infected.
• Manually scan for malware: If you think a specific file, folder, or your entire system might be infected, you can run a manual scan using built-in tools like Windows Security. Here’s a quick video guide: How to Manually Scan for Malware in Windows 10.

Defend your PC like a pro. Watch 5 Steps for Removing Malware from Your Computer and boost your system’s security.

Effective endpoint protection with built-in tools

It takes a great deal of effort to restore your system after a malware infection. The best defense against malware is a good offense: don’t get infected at all. NinjaOne makes it easy to patch, secure, harden, and back up devices to protect your endpoints. Learn more about NinjaOne’s solutions, as well as its SaaS backup feature for fast and efficient cloud-based data storage and recovery in case of any IT disaster.