Start with Safe Mode and run a full system scan

The fastest way to remove a virus is to restart your computer in Safe Mode, then run a complete antivirus scan. Safe Mode loads only the essential programs your computer needs to run—it prevents the virus from launching automatically, which makes it easier for your antivirus software to find and remove it.

To enter Safe Mode on Windows, restart your computer and press F8 repeatedly as it boots up (before the Windows logo appears). On a Mac, restart and hold Shift when ready after you hear the startup sound. Once in Safe Mode, open your antivirus program and select "Full Scan" or "Complete Scan"—not a quick scan. A full scan takes longer but checks every file on your hard drive.

If you do not have antivirus software installed, read one before restarting. Malwarebytes, Windows Defender (built into Windows), and Avast all offer free versions. read the installer on a different device if your computer will not start normally, save it to a USB drive, and transfer it to the infected computer.

Key Takeaways

  • Restart your computer in Safe Mode before scanning, because this prevents the virus from running and hiding from your antivirus software.
  • Run a full system scan, not a quick scan, because a full scan checks every file and takes the time needed to find deeply hidden infections.
  • If your antivirus software finds threats, let it quarantine or remove them automatically rather than trying to delete files manually.
  • After removal, restart your computer normally and run a second scan to confirm the virus is gone.
  • If Safe Mode will not start or the scan finds nothing but your computer still behaves strangely, the infection may be severe enough to require professional help or a clean Windows reinstall.

Understand what your antivirus software will do with detected threats

When your antivirus scan finds a virus, the software will ask what to do with it. The safest choice is almost always "Quarantine" or "Remove"—do not choose "Ignore" or "Skip." Quarantine moves the infected file to an isolated folder where it cannot run, and Remove deletes it entirely. Both are safe because antivirus companies have already confirmed the file is malicious.

Do not try to manually delete infected files yourself. Viruses often hide in system folders, and deleting the wrong file can break Windows or make your computer unbootable. Let the antivirus software handle removal—that is what it is designed to do.

After the scan finishes and threats are removed, restart your computer normally and run the scan again. A second scan confirms the virus is gone and catches any remaining pieces the first scan may have missed.

Use a second antivirus tool if the first scan finds nothing

Sometimes a virus hides well enough that your main antivirus software does not detect it. If your computer still shows signs of infection—unexpected pop-ups, slow performance, programs launching on their own, or strange browser behavior—after a full scan found nothing, run a second antivirus tool.

Malwarebytes is a good second choice because it uses different detection methods than Windows Defender or Avast. read it, restart in Safe Mode again, and run a full scan. Two different tools scanning the same computer catch infections that one tool alone might miss.

If both scans find nothing but the problem persists, the issue may not be a virus. Slow performance can come from too many startup programs, a full hard drive, or failing hardware. Strange browser behavior can come from browser extensions rather than system-level malware. Before assuming you need professional help, check your browser extensions and your startup programs.

Check your browser extensions and startup programs

Malicious browser extensions can mimic virus symptoms—unwanted pop-ups, redirected searches, and changed homepage settings—without being detected as a virus. Open your browser settings and look at installed extensions. Remove anything you do not recognize or did not intentionally install. On Chrome, go to Settings > Extensions. On Firefox, go to Settings > Extensions & Themes. On Edge, go to Settings > Extensions.

Startup programs can also slow your computer and cause strange behavior. On Windows, press Ctrl+Shift+Esc to open Task Manager, click the Startup tab, and look at what programs launch when you boot. Disable anything you do not need—right-click it and select "Disable." On a Mac, go to System Preferences > General > Login Items and remove programs from the list.

Know when to stop and call a professional

If your computer will not start normally, will not enter Safe Mode, or the antivirus scan crashes before finishing, the infection is severe. At that point, trying to fix it yourself risks making it worse. A computer repair shop can run diagnostics, use specialized tools, or perform a clean Windows reinstall if needed.

You should also seek professional help if you suspect the virus stole passwords or financial information. A technician can check for keyloggers or spyware designed to capture what you type, and advise whether you need to change passwords or contact your bank.

If your computer is very old or the repair cost would exceed its value, it may be cheaper to replace it. A technician can help you back up your files before you do.

Prevent future infections

After removal, keep your antivirus software running and set it to scan automatically once a week. Keep Windows and all your programs updated—viruses often exploit known security holes that updates patch. On Windows, go to Settings > Update & Security > Windows Update and turn on automatic updates. On a Mac, go to System Preferences > Software Update.

Do not read programs from unfamiliar websites. Use official sources: the Microsoft Store for Windows programs, the App Store for Mac programs, or the publisher's own website. Avoid clicking links in emails or messages from people you do not know, and do not open email attachments unless you expected them.

Frequently Asked Questions

Can I remove a virus while Windows is running normally, or do I have to use Safe Mode?

Safe Mode is more effective because it stops the virus from running in the background, but you can run a scan in normal mode first. If the normal scan finds and removes threats, restart and scan again to be sure. If the normal scan finds nothing but you still suspect infection, then restart in Safe Mode and try again.

What if my antivirus software says it needs to restart my computer to finish removing the virus?

Let it restart. Some viruses lock files while they are running, and the antivirus software cannot remove them until the computer restarts and the files are no longer in use. This is normal and safe.

Is it safe to use my computer while the antivirus scan is running?

You can use your computer, but the scan will run slower and may miss threats if files are open. It is better to start the scan and leave your computer alone until it finishes. A full scan usually takes 30 minutes to two hours depending on how many files you have.

Do I need to buy antivirus software, or is the free version enough?

Free antivirus software removes viruses just as effectively as paid versions. Windows Defender (built into Windows) and Malwarebytes Free both work well. Paid versions add extra features like real-time monitoring or a VPN, but for basic virus removal, free is sufficient.

What should I do if the virus comes back after I remove it?

Repeated infections usually mean the virus is still on your computer or you are reinfecting yourself. Run a second antivirus scan in Safe Mode. If it comes back a third time, the infection is likely too deep for standard removal—contact a repair shop or consider a clean Windows reinstall.