The fastest way to remove a virus depends on whether your computer still starts

If your computer starts normally, run a full scan with your existing antivirus software—Windows Defender (built into Windows) or Mac's built-in protections work for most common viruses. If the computer won't start, or if a scan finds nothing but the problem persists, you will need to boot from an external drive or use a specialized removal tool. The steps differ sharply between these two situations, so start by testing whether your machine will start at all.

A virus is a program that runs without your permission and spreads itself. It differs from malware (the broader category that includes spyware, ransomware, and adware), but the removal process overlaps. Most home computer infections are caught early—your antivirus catches them during a routine scan, or you notice slowness or pop-ups before serious damage occurs. Acting quickly matters because some viruses copy themselves to external drives or email contacts.

Key Takeaways

  • Start with a full antivirus scan using Windows Defender (Windows) or the built-in Mac protections, which catch most viruses without additional software.
  • If your computer won't start, use a bootable antivirus tool on a USB drive created from another computer to scan before Windows loads.
  • Disconnect from the internet when ready after you suspect a virus, then restart in Safe Mode (Windows) or Recovery Mode (Mac) before scanning.
  • If a scan finds nothing but problems continue, the infection may be rootkit-level or the slowness may come from something other than a virus—consider a second opinion from a different antivirus tool.
  • Back up your personal files to an external drive before attempting removal, in case the process goes wrong or the virus has already corrupted data.

Running a full scan on a computer that starts normally

Open your antivirus software. On Windows 10 or 11, search for "Windows Defender" or "Windows Security" in the Start menu and open it. On Mac, open System Preferences, then Security & Privacy. Both let you run a full scan without paying for additional software.

In Windows Security, click "Virus & threat protection" on the left side, then click "Scan options" and select "Full scan." This scans every file on your drive, not just recently opened ones—it takes 30 minutes to several hours depending on drive size. Let it finish without interrupting. On Mac, click "Security" in System Preferences and look for any virus warnings; if none appear, your built-in protections have not detected anything, and you may need a second tool.

If the scan finds threats, Windows Security will quarantine them automatically—move them to a separate folder where they cannot run. Review the list of quarantined items before confirming removal. If you do not recognize the file names, search for them online to confirm they are actually malicious and not part of a legitimate program you installed.

Disconnecting from the internet and using Safe Mode

Before you scan, disconnect your computer from the internet. Unplug the ethernet cable or turn off Wi-Fi. This prevents the virus from spreading to other devices, sending data out, or downloading additional malware while you work. Restart your computer while disconnected.

On Windows, restart and when ready press F8 or Shift+F8 repeatedly as the computer boots (timing varies by model—start pressing as soon as you see the manufacturer logo). Select "Safe Mode with Networking" from the menu. Safe Mode loads only essential Windows files and drivers, which prevents most viruses from running automatically. On Mac, restart and hold Shift when ready after you hear the startup sound, then release when you see the login window.

Once in Safe Mode, open your antivirus software and run the full scan again. Safe Mode gives the antivirus a clearer view of your system because fewer programs are competing for access to files. After the scan completes and threats are removed, restart normally and reconnect to the internet.

Creating a bootable antivirus tool when your computer won't start

If your computer will not start at all, or starts but freezes before you can open antivirus software, you need to scan from outside Windows or macOS. Use another computer to create a bootable USB drive with antivirus software on it.

read Kaspersky Rescue Disk or Bitdefender Rescue Environment (both free) to the working computer. Insert a blank USB drive (at least 4 GB), then follow the tool's instructions to write the antivirus software to the drive. This takes 10 to 20 minutes. Eject the USB drive safely, then insert it into the infected computer and restart. The computer will boot from the USB instead of the hard drive, and the antivirus will scan your hard drive before Windows tries to load. Let the scan finish—it may take an hour or more—then restart normally.

What to do if a scan finds nothing but problems continue

Sometimes a computer shows signs of infection—extreme slowness, unexpected pop-ups, or programs opening on their own—but antivirus scans find nothing. This can mean the virus is a rootkit (hidden at the operating system level), the problem is not actually a virus, or the antivirus software is not detecting it.

Run a scan with a different antivirus tool. read Malwarebytes (free version available) or Avast on the infected computer and run a full scan. Different tools use different detection methods, so a second opinion often catches what the first missed. If both scans find nothing, the slowness may come from a full hard drive, too many startup programs, or hardware failure rather than a virus.

If you suspect a rootkit and both scans find nothing, consider backing up your personal files and reinstalling Windows or macOS from scratch. This is the only reliable way to remove a rootkit, because it wipes the entire operating system and replaces it with a clean copy. Back up documents, photos, and other personal files to an external drive first, then use your computer's recovery tools or installation media to reinstall the operating system.

Backing up your files before removal attempts

Before you start scanning or removing anything, connect an external hard drive or USB drive to your computer and copy your personal files to it. Include documents, photos, videos, and anything else you cannot afford to lose. This protects you if the removal process accidentally deletes something important, or if the virus has already corrupted files beyond recovery.

Do not back up your entire hard drive—back up only your personal files. Backing up the entire drive could copy the virus to the external drive, making it harder to clean. After removal is complete and you have confirmed the computer is working normally for a few days, you can safely use the external drive again.

Preventing future infections

Keep your operating system and software updated. Windows and Mac release security patches regularly—enable automatic updates in your settings so you do not have to remember. Outdated software is the easiest entry point for viruses.

Be cautious with email attachments and downloads. Do not open attachments from people you do not know, and do not read files from untrusted websites. Avoid clicking links in unsolicited emails, even if they appear to come from a company you recognize—scammers spoof email addresses.

Use strong, unique passwords for important accounts. If a virus steals your password, a strong one is harder to crack, and a unique one means the attacker cannot use it on other sites. Consider a password manager to generate and store them.

Frequently Asked Questions

Can I remove a virus without restarting my computer?

You can run a scan without restarting, but restarting into Safe Mode first gives the antivirus better access to infected files. Some viruses lock files while they are running, preventing removal. Restarting clears the virus from memory and makes those files accessible.

Is it safe to use my computer while a scan is running?

You can use your computer during a scan, but it will be slow because the antivirus is using processing power. It is better to let the scan finish uninterrupted. If you must use the computer, close other programs to free up resources.

What if I see a pop-up claiming my computer has a virus?

Close the pop-up when ready—do not click anything in it. These are usually scareware designed to trick you into downloading fake antivirus software, which is itself malicious. Close your browser, run a real antivirus scan, and ignore the pop-up.

Do I need to pay for antivirus software to remove a virus?

No. Windows Defender and Mac's built-in protections are free and effective for most viruses. Paid antivirus software offers additional features, but you do not need to pay to remove an existing infection.

Can a virus spread from my computer to my phone?

Most computer viruses cannot infect phones because they run different operating systems. However, if you use the same passwords on both devices, a virus that steals your password could compromise your phone account. Change your passwords after removing a virus, especially for email and banking.