You clicked the wrong link, or your kid downloaded a “free” game, and now the laptop is misbehaving. Before you panic or hand over money to a stranger promising to fix it, take a breath. Cleaning most malware off a home computer is a chore, not a crisis, and you can almost always do it yourself in an afternoon.
The steps below go in order for a reason. Skipping ahead is how people reinfect themselves an hour after they thought the job was done, so follow them top to bottom.
Key takeaways
- Disconnect from the internet first to stop the malware from spreading or phoning home.
- Boot into Safe Mode, then run a full scan with your built-in tool and one trusted second scanner.
- After removal, change your important passwords from a different, clean device.
- Reserve a full factory reset for the stubborn cases where scans fail to clear the problem.
Step 1: Disconnect and stay calm
Pull the plug on the malware’s lifeline. Turn off Wi-Fi or unplug the network cable so it cannot download more components or send your data anywhere.
If you are not certain the machine is even infected, run through the warning signs of a malware infection first. There is no point deep-cleaning a computer that is merely old and slow.
Step 2: Back up your important files (carefully)
If you do not already have a backup, copy your essential documents and photos to an external drive now, before you start deleting things. Copy only files you care about, not programs, and expect to scan that drive later.
Do not back up executable files or installers from an infected machine; they may carry the malware. Stick to documents, photos, and other plain data, then scan the backup drive before trusting it.
This is also a good moment to appreciate why a real backup routine matters. Had you already followed a plan like backing up your data regularly, this step would already be done.
Step 3: Boot into Safe Mode
Safe Mode starts your computer with only the essentials, which often prevents malware from loading and makes it far easier to remove. This is the single most useful trick for a stubborn infection.
On Windows
Hold Shift while clicking Restart, then choose Troubleshoot, Advanced options, Startup Settings, Restart, and finally press 4 for Safe Mode. Microsoft’s own walkthrough on starting Windows in Safe Mode has screenshots if you get lost.
On Mac
On Apple silicon, shut down, then hold the power button until options appear, pick your disk, and hold Shift while clicking Continue in Safe Mode. Macs are infected far less often, but the same logic applies.
Step 4: Run a full scan, then a second opinion
Open your built-in protection, Microsoft Defender on Windows or a trusted tool on Mac, and run a full scan rather than a quick one. A full scan checks every corner of the drive and takes longer, which is exactly what you want.
Then run one reputable second scanner for a second opinion, because no single tool catches everything. Malwarebytes’ free version is a common, well-regarded choice for this. Let each scanner remove or quarantine whatever it finds.
Run the scans twice. The first pass removes the active malware; a second pass, after a restart, catches leftovers that only appear once the main infection is gone.
Step 5: Clean up your browser
Malware loves to hide in browser extensions and settings. Open your browser’s extensions page and remove anything you did not deliberately install.
Then reset your homepage and default search engine to what you actually want, and clear your cache. If the browser still misbehaves, use its built-in “reset settings” option to return it to factory defaults.
Step 6: Change your passwords from a clean device
This step is non-negotiable, and people skip it constantly. If the malware included a keylogger or password stealer, it may already have your logins, so scanning the machine does not undo that theft.
Using a phone or a different clean computer, change the passwords for your email, bank, and any account with payment details. Turn on two-factor login while you are there. If you are weighing whether extra security software would have helped, the primer on whether you need antivirus is worth a look.
Start with your email account. Because password resets for everything else land in your inbox, an attacker who controls your email can walk into your other accounts. Secure it first.
Step 7: When to reset everything
Sometimes scans keep finding the same threat, or the computer stays broken. When cleanup fails after a couple of honest attempts, a full reset is the reliable cure.
A factory reset wipes the drive and reinstalls a clean operating system, erasing the malware along with everything else. This is why Step 2’s backup matters so much. After the reset, restore only your scanned data files, never old program installers.
For threats tied to fraud or a business, you can report the incident through the CISA reporting page. Once you are clean, fold these habits into the broader routine in securing your phone and computer so it does not happen again.
If the same warning keeps coming back after you clean it, the source is often a browser extension or a synced account quietly reinfecting the device. Check your installed extensions and recent account activity before you assume the removal failed.
Your afternoon checklist
- Disconnect the computer from Wi-Fi and any network cable.
- Copy only your important documents and photos to an external drive.
- Restart into Safe Mode using the steps for Windows or Mac.
- Run a full scan with your built-in tool, then a second trusted scanner.
- Restart and scan again to catch any leftovers.
- Remove unknown browser extensions and reset your homepage and search engine.
- From a clean device, change your email, banking, and payment passwords and enable two-factor login.
- If scans keep failing, back up your data files and do a full factory reset.
Most people finish this in an afternoon and feel a little proud afterward, which is exactly right. You handled it yourself, learned where the weak spots were, and you now have every reason to keep that backup and password habit going.
