Suspect your Windows 11 PC has malware? Here’s how to remove viruses, trojans, adware, and other malicious software.
Signs of Malware Infection
- Computer running very slow
- Random pop-ups appearing
- Browser homepage changed
- Unknown programs installed
- Antivirus disabled
- High CPU/disk usage
- Strange network activity
- Files encrypted or missing
- Redirected web searches
Preparation
Disconnect from Internet
Prevent malware from:
- Spreading to other devices
- Communicating with attackers
- Downloading more malware
- Disconnect ethernet cable
- Turn off WiFi
- Enable airplane mode
Don’t Log Into Sensitive Accounts
While infected:
- Don’t use online banking
- Don’t enter passwords
- Don’t access important accounts
Boot Into Safe Mode
Access Safe Mode
- Press Windows + I (Settings)
- System > Recovery
- Advanced startup > Restart now
- Troubleshoot > Advanced options
- Startup Settings > Restart
- Press 4 for Safe Mode
- Or 5 for Safe Mode with Networking (if need to download tools)
If Can’t Access Settings
- Hold Shift while clicking Restart
- Or restart 3 times during boot to force recovery
Windows Security Scan
Full Scan
- Open Windows Security
- Virus & threat protection
- Scan options
- Select Full scan
- Click Scan now
- Wait for completion (30-60 minutes)
- Remove all threats found
Offline Scan
For persistent malware:
- Windows Security > Virus & threat protection
- Scan options
- Select Microsoft Defender Antivirus (offline scan)
- Click Scan now
- Computer restarts and scans before Windows loads
Use Malwarebytes
Download and Run
- Download Malwarebytes Free from official site
- Install (Safe Mode is fine)
- Open Malwarebytes
- Click Scan
- Wait for scan to complete
- Click Quarantine for all threats
- Restart computer
Why Malwarebytes
- Catches malware other scanners miss
- Free version effective for removal
- Specializes in malware, adware, PUPs
- Safe to use alongside Windows Security
Additional Scanners
Run Multiple Scanners
Different tools catch different threats:
- Malwarebytes - Malware, adware, PUPs
- HitmanPro - Second opinion scanner
- AdwCleaner - Adware and browser hijackers
- ESET Online Scanner - Comprehensive online scan
Scanner Order
- Windows Security offline scan first
- Then Malwarebytes
- Then additional scanners if needed
Remove Suspicious Programs
Uninstall Unknown Software
- Settings > Apps > Installed apps
- Sort by Install date
- Look for unfamiliar programs
- Uninstall suspicious items
Check Startup Programs
- Task Manager > Startup tab
- Disable suspicious items
- Right-click > Disable
Browser Cleanup
Reset Browser
Chrome:
- Settings > Reset settings
- Restore settings to original defaults
- Click Reset settings
Edge:
- Settings > Reset settings
- Restore settings to default values
Firefox:
- Help > Troubleshooting Information
- Refresh Firefox
Remove Extensions
- Check all browser extensions
- Remove unknown or suspicious extensions
- Only keep what you recognize and use
Clear Browser Data
- Clear all browsing data
- Clear cookies and cache
- Reset homepage if changed
Check for Rootkits
Rootkit Scanners
Deep infections need specialized tools:
- TDSSKiller (Kaspersky) - Rootkit scanner
- GMER - Advanced rootkit detection
- Run from Safe Mode for best results
Manual Checks
Check Running Processes
- Task Manager > Details
- Look for suspicious processes
- Search unknown process names online
- End malicious processes
Check Services
- Press Windows + R
- Type
services.msc - Look for unfamiliar services
- Disable suspicious services (research first)
Check Scheduled Tasks
- Search “Task Scheduler”
- Look for suspicious tasks
- Delete malware-created tasks
After Cleanup
Verify Removal
- Restart in normal mode
- Run full scan again
- Monitor for symptoms
- Check if issues persist
Update Everything
- Update Windows
- Update all software
- Update browsers
- Update antivirus definitions
Change Passwords
After malware removal:
- Change all important passwords
- Use different device or clean computer
- Enable two-factor authentication
- Check accounts for unauthorized access
If Malware Persists
Advanced Steps
- Boot from antivirus rescue disk
- Try System Restore to before infection
- Reset Windows (keep files option)
- Clean install Windows (last resort)
When to Reset Windows
Consider full reset if:
- Malware keeps returning
- System extremely corrupted
- Multiple scan tools fail
- Ransomware encrypted files
Specific Malware Types
Browser Hijacker
- Reset all browsers
- Run AdwCleaner
- Remove suspicious extensions
- Check and reset homepage/search
Adware
- Run AdwCleaner
- Run Malwarebytes
- Uninstall adware programs
- Reset browsers
Ransomware
- DON’T pay the ransom
- Disconnect immediately
- Check nomoreransom.org for decryption tools
- Restore from backup if available
- Consider professional help
Trojans
- Full offline scan
- Run multiple scanners
- Check for backdoors
- Change all passwords after
Prevention Going Forward
Enable Real-time Protection
- Windows Security > Virus & threat protection
- Ensure all protections ON:
- Real-time protection
- Cloud-delivered protection
- Automatic sample submission
- Tamper Protection
Safe Browsing Habits
- Don’t download from unknown sites
- Don’t click suspicious links
- Don’t open unexpected attachments
- Verify downloads are from official sources
Keep Updated
- Enable automatic Windows updates
- Update all software regularly
- Update browsers
- Use supported software versions
Malware Infection? Our Dallas technicians provide professional malware removal. We thoroughly clean infections and restore your system.
Tried the steps and still stuck?
Tell us what's happening and a DFW technician will get back to you within 30 minutes during business hours. We come to your home or office, same day.