Windows Security

Remove malware on Windows (safe order)

Evict malware without making things worse — isolation, scans, cleanup, then verify.

16 min read Intermediate Updated 9 Jun 2026

Step-by-step guide

Work through each section in order. Stop when your issue is resolved — you do not need every step for every situation.

Warning

Use an administrator account for these steps, and keep a recent backup before making repair or security changes.

What you will achieve

Evict malware without making things worse — isolation, scans, cleanup, then verify.

1) Isolate and scan offline

  1. Disconnect network if active malware is suspected.
  2. Open Windows Security → Virus & threat protection → Scan options.
  3. Run Microsoft Defender Offline scan.

2) Clean persistence points

  1. Check startup entries in Task Manager → Startup apps.
  2. Review browser extensions and uninstall unknown items.
  3. Inspect scheduled tasks and remove suspicious jobs.

3) Repair system files

DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow

Related guides

malware security windows defender