← Back to Blog

How to Remove Malware from Your Computer in 5 Steps

24/05/2026

Malware can lock you out of your files, slow down your PC, and steal personal data. You don’t need a tech degree to clean it up, just a clear plan and the right tools. In this guide you’ll learn five usable steps to pull malware off your computer, protect your data, and stop future infections from taking hold.

We’ll walk through disconnecting from the internet, booting into safe mode, scanning the whole drive, quarantining threats, and finally restoring your system. By the end you’ll have a clean machine and a few habits that keep it safe.

Step 1: Disconnect from the Internet

When malware is active, it often tries to call home, download more code, or send your data to a remote server. Cutting the network link stops that traffic dead in its tracks.

Here’s what to do:

  • Unplug the Ethernet cable.
  • Turn off Wi‑Fi via the network icon in the task bar (Windows) or the menu bar (Mac).
  • If you’re on a laptop, enable airplane mode.

Doing this first gives you a safe window to work without the malware communicating with its command‑and‑control server.

Why it matters: many ransomware strains encrypt files only after they’ve verified a network connection. Without that link the ransomware may stall, giving you time to intervene.

Pro Tip: Keep a spare USB‑C or Ethernet cable unplugged nearby so you can reconnect quickly once you’re ready.

After you’ve isolated the machine, move on to the next step, booting into a minimal environment where the malware can’t run.

disconnecting computer from internet to stop malware spread

Step 2: Boot into Safe Mode

Safe Mode starts Windows or macOS with only the essential drivers and services. Most malware can’t load, which makes it easier to scan and delete.

Windows 10/11:

  1. HoldShiftand clickRestarton the login screen.
  2. SelectTroubleshoot > Advanced options > Startup Settings.
  3. Press4to chooseEnable Safe Mode.

macOS (Intel):

  1. Shut down the Mac.
  2. Turn it on and immediately press and holdShift.
  3. Release the key when you see the login window.

macOS (Apple Silicon): hold the power button until you see the startup options, then holdShiftand clickContinue in Safe Mode.

Apple’s official guide explains how these settings block unwanted software from launching on macOS. Following those steps gives you a clean boot environment.

Once you’re in Safe Mode, you can run a full‑system scan without interference.

Remember to keep the computer unplugged from the network while you work in Safe Mode.

Step 3: Run a Full Malware Scan

A thorough scan checks every folder, registry entry, and running process for malicious code. Use a reputable scanner that updates its definitions daily.

Popular free options include Microsoft Defender (Windows) and Apple’s built‑in XProtect (macOS). If you prefer third‑party tools, look for products that report both detection and removal rates.

Steps for a typical scanner:

  • Open the security app.
  • Select “Full Scan” or “Deep Scan”.
  • Allow the scan to finish , it may take an hour on a large drive.
  • Review the results and note any items marked as “high risk”.

During the scan, avoid opening other programs. The scanner needs full access to system files.

While many products tout detection rates above 90 %, none of the 24 tools in a recent study disclosed how often they actually remove an infection. That blind spot means you should verify that the scanner you choose offers a removal step, not just a detection score.

After the scan finishes, you’ll have a list of detected threats ready for quarantine.

Key Takeaway: A full scan in Safe Mode catches hidden malware that ordinary scans miss.
full malware scan in safe mode on computer

Step 4: Quarantine and Remove Detected Threats

Quarantine isolates the suspicious files so they can’t run while you decide what to do. Most scanners have a one‑click “Remove” option that deletes the files after confirmation.

Do this:

  1. In the scan report, select each high‑risk item.
  2. Click “Quarantine” to move it to a secure folder.
  3. After quarantine, choose “Delete” or “Repair”.

If the tool can’t delete a file, it may be a rootkit that lives in the registry. In that case, run a second opinion scanner (e.g., Malwarebytes) while still in Safe Mode.

When you’re done, restart the computer normally and run a quick scan to confirm the threats are gone.

For stubborn cases, professional help can save time. Stress‑Free Tech Support for Your Home offers a dedicated malware removal service that handles deep‑rooted infections.

Why quarantine first? It lets you back up the file if it turns out to be a false positive, preventing accidental loss of a legitimate program.

After removal, clear the temporary files folder and empty the Recycle Bin to erase any remnants.

Step 5: Restore System and Prevent Future Infections

With the malware gone, you need to bring your system back to a healthy state and put barriers in place.

Restore steps:

  • RunWindows UpdateorSoftware Updateon macOS to patch vulnerabilities.
  • Enable built‑in firewalls (Windows Defender Firewall, macOS Firewall).
  • Create a system restore point (Windows) or Time Machine backup (macOS) now that the system is clean.

Prevention habits:

  • Only download apps from official stores , the App Store or Microsoft Store.
  • Keep anti‑malware definitions up to date daily.
  • Back up important files to an external drive or cloud service.
  • Turn on real‑time protection if your scanner offers it. Only six of the 24 surveyed tools listed real‑time protection, showing it’s not a given.

For home users, a simple weekly backup routine can be the difference between a quick clean‑up and a full data loss scenario.

Finally, consider a periodic health check with a local IT service. Galvo's IT Solutions can run a custom security audit and set up automatic updates for you, ensuring the machine stays protected without you having to chase every patch.

That wraps up the five‑step process. Your computer should now run faster, and you have a plan to keep it that way.

Frequently Asked Questions

What if the malware reappears after I’ve removed it?

If the infection comes back, it usually means a lingering component survived the scan or a vulnerable app re‑installed the same code. Run another full scan in Safe Mode, then uninstall any recently added programs you don’t recognize. Updating all software and resetting browser extensions often stops the cycle.

Can I use my phone’s antivirus app to clean my PC?

No. Mobile security apps are built for Android or iOS architectures and cannot access Windows or macOS file systems. Use a PC‑focused scanner that can work at the kernel level.

Is it safe to use the built‑in Windows Defender?

Yes, Defender provides solid baseline protection and now includes cloud‑based scanning. However, the recent study showed detection rates vary widely, so pairing it with a second‑opinion scanner can improve confidence.

How often should I run a full scan?

At least once a month, or after installing new software. If you suspect an infection, run a full scan immediately in Safe Mode.

Do I need to reinstall Windows to get rid of stubborn malware?

Reinstalling is a last resort. Most infections can be cleared with Safe Mode, a reputable scanner, and manual quarantine. Only consider a clean install if the system is unusable or the malware disables all security tools.

What’s the difference between detection rate and removal success?

Detection rate measures how often a scanner spots malicious code. Removal success tracks whether the scanner actually eliminates the threat. The recent market survey found no vendor reported removal success, making it a hidden metric you should verify before buying.

Can a VPN protect me from malware?

A VPN encrypts internet traffic but does not scan files. It can keep your data private, but it won’t stop a malicious program already on your machine.

Should I disable System Restore after cleaning malware?

Keep System Restore enabled. It provides a fallback if something goes wrong during cleaning. After the system is clean, you can create a fresh restore point.

Conclusion

Removing malware is a step‑by‑step process: cut the network, boot into Safe Mode, scan deeply, quarantine the bad files, and then restore and harden the system. Following these five steps gives you a clean machine and a set of habits that keep it safe.

If you run into a particularly nasty infection, don’t hesitate to call on a local expert. Galvo's IT Solutions offers a hands‑on malware removal service that fills the industry gap where most tools stop reporting removal success.

Want to learn more about protecting your home network? Check out our Stress‑Free Tech Support for Your Home guide on setting up a secure Wi‑Fi environment.

Stay vigilant, keep your software up to date, and you’ll spend less time fighting bugs and more time getting work done.