Computers & Electronics
181,834 views
25 min · 3 min read
7 steps
Advanced

How to remove malware and adware from Windows PCs using free tools and manual cleanup steps

Removing malware and adware from a Windows PC is manageable with the right tools and a step-by-step approach. This guide walks you through free scanners, manual checks, and cleanup routines so you can restore performance and privacy reliably. Follow each step methodically and allow scans and updates time to complete.

Verified by pleasexplain editors
  1. Step 1: Back up important files

    Copy critical documents, photos, and work files to an external drive or cloud storage before making major changes. Backups prevent accidental data loss if you need to restore a system image or perform a reset; aim for at least the last 2 versions of any important file.

    [Illustration: external hard drive and cloud icon with file folders being copied]

  2. Step 2: Disconnect from networks

    Unplug Ethernet and turn off Wi‑Fi to stop the malware from communicating or spreading while you clean. Isolation reduces the chance of data exfiltration and prevents remote reinstallation; keep the PC offline until scans finish and you have a clean report.

    [Illustration: computer with Ethernet cable unplugged and Wi‑Fi icon crossed out]

  3. Step 3: Boot into Safe Mode with Networking

    Restart Windows and press Shift+Restart or use Settings > Recovery to boot into Safe Mode with Networking to load minimal drivers while allowing downloads. This prevents many stubborn programs from starting and makes removal tools more effective; expect a slightly reduced resolution and limited startup items.

    [Illustration: Windows boot menu showing Safe Mode with Networking selection]

  4. Step 4: Run malware scanners

    Install and run two free on‑demand scanners such as Malwarebytes and Microsoft Defender Offline; run full system scans (allow 1–3 hours depending on disk size). Quarantine and remove all detected threats, then reboot and run a second pass to catch any remnants.

    [Illustration: antivirus software windows scanning files with progress bar]

  5. Step 5: Use adware removal tools

    Run a focused adware remover like AdwCleaner or similar free utility to remove browser hijackers, unwanted toolbars, and PUPs. Perform a scan and clean, then review the removal log for locations cleaned (extensions, startup entries, scheduled tasks) and remove any remaining items manually if needed.

    [Illustration: browser windows with unwanted toolbars being removed by cleaner app]

  6. Step 6: Inspect startup and browser settings

    Open Task Manager > Startup to disable unknown entries and use browser settings to remove unfamiliar extensions, reset home and search pages, and clear cookies/cache. Manually remove suspicious Scheduled Tasks and Run registry entries (HKCU\Software\Microsoft\Windows\CurrentVersion\Run) only if you are comfortable editing the registry.

    [Illustration: Task Manager startup tab and browser extensions page being managed]

  7. Step 7: Apply updates and change passwords

    Update Windows, all installed software, and browser plugins to patch vulnerabilities—use Windows Update and program auto‑updaters, then reboot. Change passwords for important accounts from a known‑clean device and enable two‑factor authentication; treat passwords used on the infected PC as compromised.

    [Illustration: Windows Update screen with progress and padlock icons representing passwords changed]


  • Run scans at night when the PC is idle; full scans can take 1–3 hours.
  • Create a system restore point or full image backup before making registry edits or major removals.
  • Use portable scanner versions from a clean computer if you suspect the infected machine blocks downloads.
  • Keep a list of removed items and their locations so you can research any suspicious entries later.
  • Uninstall unused programs and browser extensions monthly to reduce attack surface.
  • Consider creating a separate limited user account for everyday use and reserve an admin account for installations.

  • Do not delete unknown system files or registry keys without researching — you can render Windows unbootable.
  • Avoid paying ransom or following instructions given by ransomware; disconnect the machine and consult a professional.
  • Be cautious with free tools from unofficial sources; download only from vendor websites to prevent installing fake cleaners.
  • If multiple scans find identical persistent malware or the system shows continuing odd behavior, consider backing up data and doing a full Windows reinstall.

Was this guide helpful?