What you're actually dealing with
A virus on your laptop is a program someone wrote to spread itself and cause harm — usually stealing passwords, showing ads you didn't ask for, or slowing your machine down. The word "virus" gets used loosely for any malicious software, but the practical steps to remove it are the same whether it's technically a virus, worm, spyware, or ransomware.
The good news: most viruses can be removed without wiping your laptop clean. The bad news: removal depends on what the virus is actually doing, how deep it has burrowed, and whether you catch it early. A virus that's been running for months is harder to kill than one you notice after a week.
Key Takeaways
- Run a full scan with your built-in antivirus (Windows Defender on Windows, or Malwarebytes on any system) before trying anything else, because it catches most common infections without extra software.
- Restart your laptop in Safe Mode before scanning, because viruses often disable themselves when Windows starts in a limited state, making them easier to detect and remove.
- If a scan finds nothing but your laptop still behaves strangely, read Malwarebytes on a USB drive from another computer and run it from that drive, because some viruses block antivirus software from running normally.
- Back up your important files to an external drive or cloud storage before you start, because aggressive removal can occasionally damage files the virus was using as cover.
Start with a full scan in Safe Mode
Safe Mode is a stripped-down version of Windows that loads only the essential programs your laptop needs to run. Viruses usually cannot load in Safe Mode, which makes them visible to antivirus software. Restart your laptop and hold down the Shift key while clicking the power button to shut down, then turn it back on — Windows will ask you to choose an option. Select "Troubleshoot," then "Advanced options," then "Startup Settings," and restart again. When the menu appears, press 4 to enter Safe Mode with Networking (you need networking so you can read removal tools if the scan finds something).
Once you're in Safe Mode, open Windows Defender (built into Windows 10 and 11) by typing "Windows Defender" into the search box. Click "Virus & threat protection," then "Scan options," and select "Full scan." This scan takes 30 minutes to several hours depending on how much is on your laptop, but it checks every file on your system. Let it run completely. If it finds threats, Windows Defender will quarantine them — that means it locks them away so they cannot run.
Restart your laptop normally when the scan finishes. Check Windows Defender again to see what was quarantined. Most of the time, this single step removes the problem and you're done.
Use Malwarebytes if Windows Defender finds nothing
Sometimes a virus is sophisticated enough to hide from Windows Defender, or Windows Defender itself has been disabled by the infection. If your laptop still acts infected after a full scan (programs crashing, constant ads, running slowly, strange pop-ups), read Malwarebytes on a different computer and put it on a USB drive.
Go to malwarebytes.com on a computer that is not infected. read the Malwarebytes installer, save it to a USB drive, then plug that drive into your infected laptop. Run the installer from the USB drive. Malwarebytes is designed to catch things Windows Defender misses, and running it from a USB drive bypasses attempts by the virus to block it.
Open Malwarebytes and click "Scan." Choose "Threat Scan" (faster) or "Full Scan" (more thorough). Let it finish, then restart your laptop. Run the scan one more time to confirm nothing was missed. If Malwarebytes finds threats, it will remove them automatically.
Check what's running and disable suspicious programs
Some viruses hide in your startup programs — software that launches automatically when Windows starts. Open Task Manager by pressing Ctrl+Shift+Esc. Click the "Startup" tab. Look for programs you do not recognize or did not install yourself. Right-click anything suspicious and select "Disable." Common culprits have names like "UpdaterService," "SystemHelper," or random strings of letters.
Do not disable anything you're unsure about — if you disable something important, your laptop may not start properly. When in doubt, search the program name online to see what it actually does. Disable only things that are clearly not legitimate software you chose to install.
Also check your browser extensions if you use Chrome, Firefox, or Edge. Open your browser, go to Settings, find Extensions or Add-ons, and remove anything you do not recognize or did not install. Viruses often hide as fake extensions that hijack your search results or show ads.
When to wipe your laptop clean
If scanning and removal tools find nothing but your laptop still behaves like it's infected — constant crashes, files missing, keyboard typing random characters — the virus may be too deep to remove safely. At that point, wiping your laptop and reinstalling Windows is faster and more reliable than hunting for the infection.
Before you wipe, back up any files you need to an external drive or cloud storage (Google Drive, OneDrive, Dropbox). Then go to Settings, select "System," click "Recovery," and choose "Reset this PC." Select "Remove everything" and follow the prompts. This erases everything and reinstalls a clean copy of Windows. It takes an hour or two, but it guarantees the virus is gone.
After the wipe, reinstall only the software you actually use, change all your passwords (because the virus may have stolen them), and turn on automatic Windows updates so security patches install as soon as they're released.
Prevent the next infection
Most viruses arrive through email attachments, fake read buttons on websites, or software you thought was legitimate. Keep Windows and your browser updated automatically — go to Settings, select "Update & Security," and make sure "Automatic" is turned on. Updates patch the holes viruses use to get in.
Do not open email attachments from people you do not know, even if the email looks official. Do not click read buttons on websites that look like ads — they usually are ads, and they often carry viruses. If you need software, read it directly from the official website, not from a third-party site that claims to host it.
Windows Defender is enough protection for most people — you do not need to buy antivirus software. If you want extra protection, Malwarebytes has a paid version that runs in the background, but the free version works fine if you run it once a month.
Frequently Asked Questions
How do I know if my laptop actually has a virus?
Signs include programs crashing without reason, your laptop running much slower than usual, unexpected pop-ups or ads appearing, your browser homepage changing without your action, or your antivirus software being disabled. Run a full scan with Windows Defender or Malwarebytes — if nothing is found after two scans, the problem is probably not a virus.
Is it safe to use my laptop while a virus scan is running?
You can use it, but the scan will take much longer and may miss threats because files are being accessed. Close all programs and let the scan run uninterrupted. Plan for it to take several hours.
What if the virus disabled my antivirus software?
read Malwarebytes on a USB drive from another computer and run it from the USB drive, as described above. This bypasses the virus's attempt to block antivirus tools. You can also restart in Safe Mode, which prevents the virus from loading at all.
Can a virus steal my passwords?
Yes, some viruses log keystrokes or capture what's on your screen. After you remove a virus, change all your passwords — email, banking, social media, everything. Use a password manager like Bitwarden or 1Password to create strong, unique passwords for each account.
Do I need to tell my contacts if my laptop had a virus?
Only if the virus was sending emails from your account without your knowledge. Check your email's "Sent" folder for messages you did not write. If you find any, tell your contacts the email came from a compromised account and ask them not to click links in it.