Should I remove malware myself or reinstall Windows?

Try one structured cleanup pass. If the detection returns, or if the machine handled banking during an infostealer infection, a clean installation is the more reliable and usually faster option.

Do I need to pay for removal software?

For most consumer infections, no. Microsoft Defender Offline plus one free second-opinion scanner covers it.

Will removing malware delete my files?

It can. Quarantine sometimes catches legitimate files, and ransomware recovery may require restoring from backup, so copy anything irreplaceable to external storage first.

How do I know the computer is actually clean?

Two independent engines report clean, the original symptom is gone, and nothing unfamiliar is left in startup entries or browser extensions. No scan can prove absence, which is why credential rotation matters after any serious infection.

Removal cluster

Virus and Malware Removal

Everything on this site about detecting, removing and recovering from an infection, organised as one process rather than a pile of articles.

Start with the symptom check if you are not certain anything is wrong. If you already know what you are dealing with, jump straight to the matching removal guide.

The removal process in short

Every successful cleanup follows the same shape: confirm there is really an infection, protect your data, remove the payload where it cannot defend itself, clean what it left behind, then rotate the credentials it may have taken.

Confirm the symptom is malware and not hardware, storage or browser noise
Back up documents and photos to external storage before touching anything
Scan from safe mode, then run an offline scan that boots outside Windows
Add one on-demand second-opinion scanner for adware and unwanted programs
Clean startup entries, scheduled tasks, extensions and browser shortcuts
Change passwords from a different, known-clean device and enable two-factor authentication

When cleanup is the wrong answer

Reinstalling Windows is faster and safer than a third cleaning pass. If the same detection keeps returning, if security software will not install, or if an infostealer was active while you banked on the machine, go straight to a clean installation and treat every stored credential as exposed.

Free tools do most of this work

Microsoft Defender Offline handles pre-boot scanning at no cost, and the free on-demand Malwarebytes scanner covers the adware and potentially unwanted programs that resident engines deliberately tolerate. Paid suites help mainly with prevention, not with cleaning a machine that is already infected.

Removal guides

Signs Your Computer Has a Virus

Twelve symptoms that genuinely indicate malware on a Windows PC, the ordinary faults people mistake for infection, and the first three checks to run.

7 min read

Complete Malware Removal Guide

A complete malware removal process for Windows: disconnect, back up, scan in safe mode, run a second opinion, clean startup entries and verify the machine is clean.

9 min read

How to Remove a Virus From Windows

Remove a virus from Windows using built-in tools: safe mode, offline scanning, quarantine handling, startup cleanup and confirmation that the PC is clean.

7 min read

How to Remove Malware From a PC

A complete malware removal process for Windows: disconnect, scan offline, clean with a second-opinion scanner, reset browsers and verify the PC is actually clean.

8 min read

How to Remove a Trojan

Identify and remove trojan malware on Windows: symptoms to look for, offline scanning, credential cleanup and how to stop it coming back.

6 min read

How to Remove Ransomware

What to do in the first hour of a ransomware attack: isolate the device, identify the strain, remove the payload, check for a free decryptor, and restore safely.

8 min read

How to Remove Spyware

Detect and remove spyware on Windows and Android, including stalkerware installed by someone with physical access — plus the safety steps to take before you delete it.

7 min read

How to Remove Adware

Remove adware from Windows: identify the bundled installer, clear browser extensions and policies, reset search settings and stop pop-ups from returning.

6 min read

How to Remove a Browser Hijacker

Get rid of a hijacked search engine or homepage: find the enforcing extension or policy, clean shortcuts and profiles, and keep the setting from reverting.

6 min read

How to Remove Malware from Android

Remove malicious apps from Android using safe mode, permission review and Play Protect, and learn which symptoms are actually malware rather than a failing battery.

6 min read

Using Safe Mode to Remove Malware

Boot Windows 10 or 11 into safe mode with networking, run scans where malware cannot start, and know when safe mode is not enough.

5 min read

How to Scan Windows for Viruses

Step-by-step instructions for running a full virus scan on Windows 11 and Windows 10 with Windows Security, plus offline scans and second-opinion scanners.

6 min read

Understand what you are removing

What Is Malware?

Threat explainer

What Is Spyware?

Threat explainer

What Is a Trojan?

Threat explainer

What Is a Computer Worm?

Threat explainer

What Is Adware?

Threat explainer

What Is a Rootkit?

Threat explainer

Frequently asked questions

Should I remove malware myself or reinstall Windows?: Try one structured cleanup pass. If the detection returns, or if the machine handled banking during an infostealer infection, a clean installation is the more reliable and usually faster option.
Do I need to pay for removal software?: For most consumer infections, no. Microsoft Defender Offline plus one free second-opinion scanner covers it.
Will removing malware delete my files?: It can. Quarantine sometimes catches legitimate files, and ransomware recovery may require restoring from backup, so copy anything irreplaceable to external storage first.
How do I know the computer is actually clean?: Two independent engines report clean, the original symptom is gone, and nothing unfamiliar is left in startup entries or browser extensions. No scan can prove absence, which is why credential rotation matters after any serious infection.