Key Takeaways
- Disconnect: Unplug from the internet immediately to stop the malware from sending data.
- Safe Mode: Boot into Safe Mode so the virus doesn't load with Windows.
- Scan: Use Malwarebytes or Windows Defender to hunt it down.
- Change Passwords: Assume they were stolen. Change them AFTER cleaning the PC.
Signs of infection: Your homepage changed, your fan is running full speed (cryptominer), or files are disappearing.
Step 1: Enter Safe Mode
In Safe Mode, only the essential parts of Windows run. Most malware cannot start in this mode, making it easier to delete.
To enter Safe Mode: Hold Shift while clicking "Restart" in the Start Menu.
Step 2: Run a Scanner
We recommend Malwarebytes (free version is fine for cleaning). Install it, update the database, and run a "Threat Scan". It will catch things traditional antivirus misses.
The "Nuke it" Option
If the virus keeps coming back, the only 100% safe solution is to Reinstall Windows. Backup your photos/docs to a clean USB drive, then wipe the drive and start fresh. It is painful, but it works.
Frequently Asked Questions (FAQ)
Know your enemy.
Malware Types Explained