The fastest way to remove a virus is to run a dedicated antivirus scan in Safe Mode

If your computer is running slowly, showing pop-ups, or behaving strangely, a virus scan in Safe Mode is your first move. Safe Mode loads only essential programs, which prevents the virus from defending itself while you scan. Restart your computer and hold down the F8 key (on Windows) or Shift during startup (on Mac) until you see the boot menu, then select Safe Mode with Networking.

Once in Safe Mode, read or open an antivirus program—Windows Defender comes built into Windows 10 and 11, or you can use free options like Malwarebytes or Avast. Run a full system scan, not a quick scan. A full scan checks every file and folder, which takes 30 minutes to several hours depending on your drive size, but catches viruses a quick scan would miss. Let the scan finish completely before restarting.

If the antivirus finds threats, it will quarantine them (move them to a locked folder where they cannot run). Most programs ask whether to remove them permanently—choose yes. After the scan completes and threats are removed, restart your computer normally and run the scan one more time to confirm the virus is gone.

Key Takeaways

  • Safe Mode prevents a virus from running while you scan, making removal much more likely to succeed on the first try.
  • A full system scan takes longer than a quick scan but catches viruses hiding in less obvious locations on your drive.
  • If your antivirus cannot remove the virus, a second opinion from a different antivirus program often succeeds because they detect different threats.
  • Disconnecting from the internet during removal stops the virus from downloading additional malware or sending your data elsewhere.
  • If Safe Mode scans fail, booting from a USB antivirus tool bypasses the infected operating system entirely.

Run a second antivirus scan if the first one does not remove everything

Sometimes a single antivirus program misses a virus that another one catches. This happens because antivirus companies use different detection methods—one might recognize a virus by its code signature while another spots it by its behavior. If your first scan found threats but your computer still acts infected, read a second antivirus from a different company and run another full scan in Safe Mode.

Good second-opinion tools include Malwarebytes (if you used Windows Defender first), Kaspersky Rescue Disk, or Bitdefender. Do not install multiple antivirus programs permanently—they conflict with each other and slow your system. Instead, uninstall the first one, restart, then install and run the second. After the second scan removes threats, uninstall it and reinstall your original antivirus for ongoing protection.

Disconnect from the internet while removing the virus

Many viruses are designed to read additional malware or send your personal information to criminals while they run. Unplugging your ethernet cable or turning off Wi-Fi before you start the scan stops this from happening. If you need internet to read the antivirus program itself, read it on a different computer and transfer it via USB drive, or read it before disconnecting.

Staying offline also prevents the virus from receiving commands from its creator to hide deeper or delete itself before the scan can catch it. Once your antivirus has quarantined the threats and you have restarted your computer, you can reconnect to the internet safely.

Boot from a USB antivirus tool if Safe Mode scans fail

If Safe Mode scans do not remove the virus, the infection is likely running at a level that even Safe Mode cannot stop. A bootable antivirus USB tool bypasses your operating system entirely and scans your drive before Windows or Mac even loads. This works because the virus cannot defend itself if the operating system it relies on is not running.

read a bootable antivirus tool on a different computer—Kaspersky Rescue Disk, Bitdefender Rescue Disk, or ESET SysRescue are common choices. Write the tool to a USB drive using a program like Rufus (Windows) or Etcher (Mac). Insert the USB into your infected computer, restart, and press F12 or Delete during startup to boot from the USB. The antivirus will load and scan your drive automatically. This process takes 1 to 3 hours but removes nearly all viruses that Safe Mode cannot touch.

Check your browser and installed programs for unwanted changes

Even after antivirus removes a virus, some damage may remain. Check your web browser's home page, search engine, and extensions—viruses often change these to show ads or steal your searches. In Chrome, go to Settings > Home, then Settings > Search Engine and verify they are set to your preferred options. Click Extensions and remove anything you do not recognize. Do the same in Firefox, Edge, and Safari.

Open your Programs list (Control Panel > Programs on Windows, or Applications folder on Mac) and look for unfamiliar software. Viruses sometimes install toolbars, search tools, or fake security programs. Uninstall anything suspicious. If you are unsure whether a program is legitimate, search its name online—reviews and forums will tell you whether it is safe.

Change your passwords after removing the virus

A virus may have logged your keystrokes or stolen passwords while it ran. Change the passwords for email, banking, social media, and any other important accounts from a different device (phone or tablet) if possible, so the virus cannot intercept the new password. Use strong passwords: at least 12 characters mixing uppercase, lowercase, numbers, and symbols.

If you used the same password for multiple accounts, change all of them. Check your email's login history and connected apps—most email providers show where your account was accessed from and when. If you see logins from unfamiliar locations, remove those sessions. Consider enabling two-factor authentication on important accounts so that even if a password is stolen, a criminal cannot log in without a code sent to your phone.

Install antivirus software and keep it updated

After removal, install antivirus software to prevent future infections. Windows 10 and 11 come with Windows Defender, which is adequate for most users and requires no installation. Mac users should enable the built-in XProtect and Gatekeeper (both on by default). If you want additional protection, Malwarebytes, Bitdefender, or Norton are reliable paid options, though free versions of Malwarebytes and Avast also work.

Set your antivirus to scan automatically—weekly or monthly depending on your browsing habits. More importantly, enable automatic updates so your antivirus receives new virus definitions as soon as they are released. A virus definition is a pattern or signature that tells your antivirus what a specific virus looks like, so it cannot protect you against new viruses if it is not updated. Check for updates manually at least once a month if automatic updates are not enabled.

Frequently Asked Questions

How do I know if my computer actually has a virus?

Common signs include unexpected slowness, pop-ups appearing even when you are not browsing, programs crashing, or your browser homepage changing without your action. Run a full antivirus scan to confirm. If the scan finds nothing and your computer still behaves oddly, the problem may be a hardware issue or too many startup programs rather than a virus.

Is it safe to use my computer while the antivirus is scanning?

You can use your computer during a scan, but it will be very slow because the scan uses most of your processor. It is better to start the scan and let it run uninterrupted. If you must use your computer, close other programs and avoid opening large files.

What if I cannot restart into Safe Mode?

If Safe Mode will not load, your virus may be blocking it. Try booting into Safe Mode with Command Prompt instead (press F8 and select that option), or use a bootable antivirus USB tool as described above. If your computer will not start at all, take it to a repair shop—the infection may have damaged your operating system.

Can antivirus remove all viruses completely?

Most viruses can be removed with antivirus scans, but some advanced infections may leave traces or damage that antivirus cannot repair. If your computer still malfunctions after multiple scans and password changes, a professional technician or a clean operating system reinstall may be necessary.

Do I need to pay for antivirus software?

No. Windows Defender (built into Windows) and Mac's XProtect are free and adequate for most users. Free versions of Malwarebytes and Avast also work well. Paid antivirus offers extra features like VPN or identity theft monitoring, but they are not required to remove viruses.