How to Remove Malware and Viruses From Your Computer
Slow performance, pop-ups when no browser is open, or a homepage that changed on its own — these are the classic signs, and in most cases you can clean an infected computer yourself with free tools already available right now. Here's the process, in the order that actually works, plus what to do differently if it's ransomware.
A computer that's suddenly slow, hot, or full of pop-ups is usually telling you something specific — not just "getting old."
Is It Actually Malware?
Before running anything, confirm you're dealing with an actual infection and not just a slow, aging machine. The common tells: pop-up ads appearing when no browser is open, your browser homepage or search engine changing on its own, security software that's mysteriously disabled, unfamiliar high-CPU processes in Task Manager or Activity Monitor, and files with strange new extensions.
Adware & Pop-ups
Ads appearing outside your browser, or a browser that redirects to sites you never typed. Usually the least destructive, most common infection.
Browser Hijackers
Your homepage, search engine, or new-tab page changed without you touching a setting. Often bundled with a "free" download you didn't fully vet.
Trojans & Spyware
Quietly running in the background, often stealing data or resources rather than announcing themselves — high CPU usage from an unfamiliar process is the tell.
Ransomware
Files suddenly encrypted with a ransom note demanding payment. Different category, different response — see the warning below.
How to Remove Malware, Step by Step
Disconnect from the internet
This stops active malware from communicating out or spreading further while you work, and prevents it from downloading reinforcements.
Boot into Safe Mode
Safe Mode loads only essential system processes, which stops most malware from running and defending itself against removal — this is where the real cleaning happens.
Run Windows Defender's offline scan
Windows Security → Virus & threat protection → Scan options → Microsoft Defender Antivirus (offline scan). It takes 15-30 minutes and reboots automatically — quarantine anything it finds.
Run Malwarebytes as a second opinion
No single scanner catches everything. Malwarebytes' free version is built specifically for a one-time cleanup pass and regularly catches what Defender misses.
Clean up your browser
Check Settings → Extensions for anything you don't recognize and remove it, then use your browser's built-in "reset settings" option to undo any hijacked homepage or search engine.
Change your passwords
If spyware was involved, assume anything typed during the infection could have been captured — update passwords for email, banking, and any accounts you logged into recently.
Running Windows Defender and Malwarebytes in sequence catches meaningfully more than either scanner alone.
Most malware in 2026 arrives through typosquatted ads pretending to be popular software downloads — not sophisticated hacking.
Staying Clean Going Forward
Most 2026 infections trace back to a handful of avoidable habits: downloading software from search-ad results instead of the official site, pirating software or games, and clicking links in phishing emails. Windows Defender plus an ad blocker like uBlock Origin covers the majority of home threats without paying for a suite. Keep your operating system and browser updated — most malware exploits vulnerabilities that patches already fixed months earlier.
The Verdict
For common infections — adware, browser hijackers, trojans — Safe Mode plus Windows Defender plus Malwarebytes, run in that order, handles the vast majority of cases for free. Ransomware is the clear exception: stop, disconnect, and look for a free decryptor rather than attempting removal yourself. Going forward, Windows Defender and careful browsing habits beat most paid antivirus suites for home use — the biggest single risk reduction is simply not downloading software from ad results or pirated sources.
Frequently Asked Questions
Do I need paid antivirus in 2026?
For most home users, no. Windows Defender combined with careful browsing habits and a monthly Malwarebytes scan covers the vast majority of home threats. Paid suites make more sense for small businesses needing centralized management.
What should I do if my files are encrypted by ransomware?
Stop immediately, disconnect from the internet, and do not pay the ransom or attempt DIY removal. Check the No More Ransom project for a free decryptor matching your specific ransomware variant, and consider contacting a professional.
Why did my antivirus miss the infection in the first place?
No single antivirus catches everything — brand-new threats can slip past until signature databases update. Running a second-opinion scanner like Malwarebytes alongside your primary antivirus catches more than either tool alone.
More Software Guides, Written Clearly
Browse our full library of software guides, updated regularly as tools and threats change.
Explore All GuidesMore from the creator
Explore two other projects from the same creator.