Your antivirus missed it. Pop-ups are everywhere, your browser has a new homepage you didn't set, programs are running that you didn't install. Here's how to remove malware manually when automated tools aren't enough.
Step 1: Disconnect from the Internet
Before you start cleaning, disconnect your computer from the internet (unplug ethernet or disable WiFi). This prevents malware from downloading more payloads, sending your data out, or receiving commands from a remote server.
Step 2: Boot into Safe Mode
Safe Mode loads only essential Windows drivers and services, which prevents most malware from running:
- Hold Shift while clicking Restart (from the Start menu or login screen)
- Choose Troubleshoot → Advanced options → Startup Settings → Restart
- Press 5 for "Safe Mode with Networking" (you'll need networking for download tools later)
Step 3: Check Startup Programs
Malware almost always adds itself to startup so it runs every time you boot:
- Open Task Manager (Ctrl+Shift+Esc) → Startup tab
- Look for entries you don't recognize. Google any suspicious names
- Disable anything suspicious (right-click → Disable)
Also check: Win+R → msconfig → Services tab → Hide all Microsoft services. Anything unfamiliar in the remaining list could be malware.
Step 4: Remove Suspicious Programs
- Go to Settings → Apps → Installed apps
- Sort by "Date installed" to see what was installed recently
- Uninstall anything you don't recognize or didn't intentionally install
- Look for: toolbars, "system optimizers," "driver updaters," apps with generic names
Step 5: Clean Your Browsers
Browser hijackers are the most common malware type. For each browser:
- Check extensions: Remove anything you didn't install. Malware extensions often have generic names like "Search Helper" or "Web Protection"
- Reset homepage and search engine: Settings → Search engine → change back to Google or your preferred search
- Clear browsing data: Clear cookies and cached data. This removes tracking cookies and some browser-based malware
- Nuclear option: If the browser is badly infected, reset it to defaults (Settings → Reset settings → Restore settings to their original defaults)
Step 6: Run Malwarebytes (Free)
After manual cleaning, run Malwarebytes Free (malwarebytes.com) for a thorough scan. It catches things you missed. Let it quarantine everything it finds. You don't need the paid version — the free scanner is excellent for one-time cleanup.
Step 7: Verify You're Clean
- Restart normally (not Safe Mode)
- Check that your browser homepage is correct
- Open Task Manager and look at CPU/memory usage — nothing suspicious running in background
- Run a full Windows Defender scan (Settings → Privacy & Security → Windows Security → Virus & threat protection)
After Cleanup: Secure Your Accounts
If malware was running on your computer, assume your passwords were compromised:
- Change passwords for email, banking, and social media — from a different, clean device if possible
- Enable two-factor authentication on critical accounts
- Check bank and credit card statements for unauthorized charges
- Consider a password manager so you have unique passwords everywhere
If you're not confident the malware is fully removed, or if it keeps coming back after cleaning, we can do a thorough remote cleanup. $99 flat rate, and we verify it's completely clean before we're done.
Need help? We fix it remotely.
$99 flat rate. No fix, no charge. Fast, professional, done right.
Book a Session →