The fastest way to remove malware depends on what kind you have

If your computer is running slowly, showing pop-up ads you didn't click, or opening websites on its own, malware is probably running on it. The fastest removal method is a full scan with your antivirus software — the program that came with Windows Defender (on Windows) or that you installed separately. Run the scan, let it finish completely, and restart your computer. Most common malware gets caught and removed this way.

If antivirus scanning doesn't work, or if your computer won't start normally, you have a second option: boot into Safe Mode (a stripped-down version of Windows that loads only essential programs) and scan again. Malware often cannot run in Safe Mode, so the antivirus can find and remove it more easily. After removal, restart normally.

For infections that survive both methods, you may need to wipe your hard drive and reinstall Windows — a complete reset that removes everything, including the malware. This is the most reliable fix but also the most time-consuming, and you will lose any files you haven't backed up elsewhere.

Key Takeaways

  • Start with a full antivirus scan in normal mode; most malware is caught and removed this way without further action.
  • If the scan doesn't work, restart into Safe Mode and scan again, because malware often cannot run in that environment.
  • Disconnect from the internet before scanning if malware is actively downloading more files or sending your data elsewhere.
  • Back up your important files to an external drive or cloud storage before attempting removal, in case the process goes wrong.
  • If malware survives antivirus scans, a complete Windows reinstall is the most reliable solution but requires time and erases everything on the drive.

How to run a full antivirus scan on Windows

Open Windows Defender (built into Windows 10 and 11) by clicking the Windows icon in the bottom left, typing "Windows Defender," and clicking "Windows Security." Click "Virus & threat protection" on the left side. Under "Current threats," click "Scan options," then select "Full scan" and click "Scan now." The scan will take 30 minutes to several hours depending on how much is on your drive.

While the scan runs, do not use your computer for other tasks — let it work. When the scan finishes, Windows Defender will show you what it found. Click "Remove" or "Quarantine" to delete the malware. Restart your computer when prompted.

If you installed a different antivirus program (Norton, McAfee, Kaspersky, Avast, or others), open that program instead and look for a "Full Scan" or "Complete Scan" button. The steps are similar: start the scan, wait for it to finish, and remove anything it finds.

Booting into Safe Mode to remove stubborn malware

Safe Mode starts Windows with only the bare minimum programs running — no third-party software, no network drivers except what's needed for internet. Malware often cannot run in Safe Mode, which makes it easier for antivirus to find and remove. To enter Safe Mode on Windows 10 or 11, restart your computer and hold down the Shift key while it boots. You will see a menu; click "Troubleshoot," then "Advanced options," then "Startup Settings," then "Restart." When the computer restarts, press 4 or F4 to choose "Safe Mode."

Once in Safe Mode, open Windows Defender or your antivirus program and run a full scan. The process is the same as in normal mode, but malware that hides from normal scans may be visible here. Let the scan finish completely and remove anything it finds.

After removal, restart your computer normally. It will boot back into regular Windows. Check that the malware symptoms are gone — no more pop-ups, no more slowness, no more unwanted websites opening.

Disconnecting from the internet before scanning

Some malware actively downloads more malicious files or sends your personal information to criminals while your computer is connected to the internet. Before you start scanning, unplug your ethernet cable or turn off Wi-Fi. This stops the malware from communicating with its source.

Run your antivirus scan while disconnected. Once the scan finishes and malware is removed, you can reconnect to the internet safely. This step is not always necessary — Windows Defender can handle most malware even while connected — but it is a precaution that costs nothing and prevents active malware from spreading further.

When to back up files before removal

Before you attempt any malware removal, especially if you are planning to boot into Safe Mode or reinstall Windows, back up your important files to an external drive or cloud storage (Google Drive, OneDrive, Dropbox). Malware removal can sometimes go wrong and damage files you need, or the removal process itself may require you to erase your hard drive.

Plug in an external hard drive and copy your Documents, Pictures, Desktop, and any other folders that contain files you cannot afford to lose. This takes 15 minutes to an hour depending on how much you have. Once the backup is done, you can proceed with removal knowing your important files are safe.

Reinstalling Windows as a last resort

If antivirus scans in both normal mode and Safe Mode do not remove the malware, or if your computer will not start at all, reinstalling Windows is the most reliable fix. This erases everything on your hard drive and installs a fresh copy of Windows, removing all malware in the process.

To reinstall Windows, you need a USB drive with at least 8 GB of space and a working computer to create the installation media. Go to microsoft.com/software-read/windows11 (or windows10 if you use Windows 10), read the Media Creation Tool, plug in your USB drive, and follow the on-screen steps. The tool will prepare the USB drive for you.

Plug the USB drive into the infected computer, restart it, and press F12, F2, or Delete during startup to enter the boot menu (the key varies by computer model). Select the USB drive as the boot device. Windows Setup will start; follow the prompts to reinstall Windows. You will be asked where to install it — select your main hard drive. The installation will erase everything on that drive and take 20 to 45 minutes. When it finishes, you will have a clean Windows installation with no malware.

Preventing malware in the future

After you remove malware, take steps to prevent it from coming back. Keep Windows updated by going to Settings, clicking "Update & Security," and checking for updates. Enable Windows Defender by opening Windows Security and confirming that "Virus & threat protection" shows a green checkmark. Do not disable it or install conflicting antivirus programs.

Be cautious about what you read and where you read it from. Malware often hides in cracked software, pirated movies or games, and files from untrusted websites. Stick to official sources: Microsoft Store for Windows apps, the App Store or Google Play for phone apps, and the official websites of programs you need.

Do not click links in emails or messages from people you do not know, and do not open attachments unless you were expecting them. Malware spreads through email and messaging apps by pretending to be from banks, delivery services, or people you know.

Frequently Asked Questions

How long does it take to remove malware?

A full antivirus scan takes 30 minutes to several hours depending on your hard drive size and how much is on it. Removal itself is usually when ready once the scan finishes. If you need to reinstall Windows, the whole process takes 2 to 3 hours from start to finish, including the time to back up files and create installation media.

Will removing malware delete my files?

Antivirus removal does not delete your personal files — it only removes the malware itself. However, some malware is designed to damage or encrypt your files, so files may already be corrupted before you remove it. Reinstalling Windows will erase everything on your hard drive, which is why backing up first is important.

Can I remove malware without antivirus software?

Windows Defender is built into Windows 10 and 11, so you always have antivirus available without installing anything. If you use an older version of Windows or prefer a different program, you can read free antivirus like Avast or AVG. Without any antivirus, removal is much harder and usually requires reinstalling Windows.

What if my computer won't start at all?

If malware has damaged Windows so badly that your computer will not boot, you will need to reinstall Windows using a USB drive created on another computer. This is the only way to recover a computer that will not start. The process erases your hard drive, so make sure you have backed up important files first if possible.

Is it safe to use my computer while malware is on it?

No. Malware can steal passwords, credit card numbers, and personal information while you use your computer. Avoid logging into bank accounts, email, or shopping sites until malware is removed. If you already entered passwords or card numbers while malware was present, change those passwords and monitor your accounts for fraud.