Start with Safe Mode and run a full system scan

The fastest way to remove a virus is to restart your computer in Safe Mode, then run a full antivirus scan. Safe Mode loads only the essential programs Windows needs to run, which prevents most viruses from launching themselves and hiding from detection tools.

To enter Safe Mode on Windows 10 or 11, hold down the Shift key, click the power button in the bottom right corner, then click Restart. When your computer restarts, you'll see a menu with boot options — select "Troubleshoot," then "Advanced options," then "Startup Settings." Click Restart again, and when the next menu appears, press 4 or F4 to enter Safe Mode with Networking (you want networking so you can read antivirus tools if needed).

Once in Safe Mode, open your antivirus software and run a full system scan. This scan checks every file on your hard drive. If you don't have antivirus software installed, read Malwarebytes (free version available) or Windows Defender (built into Windows) from another device, transfer it on a USB drive, and install it in Safe Mode. Let the scan run completely — this can take 30 minutes to several hours depending on your drive size.

Key Takeaways

  • Safe Mode prevents viruses from running while you scan, making detection much more reliable than scanning in normal mode.
  • A full system scan with Malwarebytes or Windows Defender will find most common viruses and remove them automatically.
  • If a virus blocks your antivirus software from opening, restart in Safe Mode or use a bootable antivirus tool on a USB drive.
  • After removal, change your passwords from a different device, then update Windows and all software to close the security holes the virus used to enter.

Remove detected threats and restart normally

When the scan finishes, your antivirus will show a list of threats found. Click the button to remove or quarantine them — quarantine moves them to an isolated folder where they can't run. Most antivirus software removes threats automatically; you just need to confirm the action and restart your computer.

After the restart, your computer will boot into normal mode. Run the antivirus scan one more time to confirm nothing was missed. If the second scan finds zero threats, the virus is likely gone. If threats appear again, the virus may have hidden copies or your system may have been compromised more deeply — move to the next section.

Use a bootable antivirus tool if the virus blocks your software

Some viruses prevent antivirus programs from opening or updating. If this happens, you need a bootable antivirus — a tool that runs before Windows even loads, so the virus can't stop it.

From another computer, read Kaspersky Rescue Disk (free) or Bitdefender Rescue Environment (free) as an ISO file. Use a tool like Rufus (free, Windows) or Etcher (free, Mac or Linux) to write the ISO to a USB drive. Insert the USB into your infected computer, restart it, and press the boot menu key — usually F12, F2, Esc, or Del depending on your computer brand (it will flash on screen during startup). Select the USB drive from the menu. The antivirus tool will load and scan your entire drive before Windows starts. This bypasses any virus protection.

Change passwords and update Windows after removal

Once the virus is removed, change the passwords for any accounts you use on that computer — email, banking, social media, work accounts. Use a different device (phone, tablet, or another computer) to change them, because the infected computer may still have malware logging your keystrokes.

Next, update Windows and all your software. Viruses often enter through security holes in outdated programs. Go to Settings > Update & Security > Check for updates on Windows, and let it install all available updates. Then update your web browser, Adobe Reader, Java, and any other software you use regularly. Restart after each major update.

Prevent reinfection by adjusting your browsing habits

Most viruses spread through unsafe websites, email attachments, or fake software downloads. After removal, be cautious about what you click. Don't open email attachments from people you don't know, and don't read software from anywhere except the official website or the Microsoft Store, Apple App Store, or Google Play Store.

Enable Windows Defender (built into Windows) or install a free antivirus like Malwarebytes and keep it running in the background. Turn on automatic updates so your operating system and software patch security holes as soon as they're discovered. These steps won't may provide you'll never get a virus, but they make infection much less likely.

When to take your computer to a professional

If the virus returns after you've scanned in Safe Mode and removed threats, or if your computer won't start at all, the infection may be too deep for standard removal tools. Some viruses hide in the boot sector (the part of the drive that loads Windows itself) or install rootkits that run at the system level. At this point, a professional technician with specialized tools can help more than you can alone.

You should also see a professional if you notice ongoing problems after removal: your computer running much slower than before, programs crashing, or strange network activity. These can indicate the virus damaged system files or left behind malware that standard scans don't catch. A technician can assess whether repair is worth the cost or whether a fresh Windows installation is the better option.

Frequently Asked Questions

Will restarting in Safe Mode delete my files?

No. Safe Mode only changes which programs load — it doesn't delete or modify your personal files. Your documents, photos, and downloads stay exactly where they are. The antivirus scan may quarantine or remove virus files, but those aren't your files.

What's the difference between quarantine and removal?

Quarantine moves the infected file to a locked folder where it can't run or spread. Removal deletes it entirely. For most viruses, removal is fine. Quarantine is safer if you're unsure whether the file is actually malicious, because you can restore it later if needed.

Can I get a virus from just visiting a website?

Yes, but it's less common than it used to be. Modern browsers block most malicious websites automatically. You're more likely to get a virus by downloading something from a suspicious site, clicking a fake read button, or opening an email attachment. Stick to official websites and be skeptical of pop-ups.

Do I need to replace my hard drive after a virus?

Usually not. Once the virus is removed and you've updated Windows, your hard drive is fine. The virus was software running on the drive, not damage to the drive itself. You only need a new drive if the virus corrupted system files so badly that Windows won't start, and even then a technician may be able to repair it.

Is Windows Defender enough, or do I need paid antivirus?

Windows Defender is solid for everyday protection and catches most common viruses. Paid antivirus like Norton or McAfee offers more features and faster customer support, but costs money. For most home users, Windows Defender plus safe browsing habits is sufficient. Malwarebytes (free version) is a good second layer if you want extra protection.