How to Remove Malware: Step-by-Step Cleanup for Windows, Mac, and Android

Ana Cossack

By Ana Cossack

If your device is acting strangely, running slowly, or showing unexpected pop-ups, you likely have a malware infection. You can remove malware from Windows, Mac, and Android by disconnecting from the internet, booting into safe mode, running a full antivirus scan, and deleting infected files manually.

How to Remove Malware from Windows: Step-by-Step

Windows accounts for over 70% of desktop malware infections per AV-TEST’s 2025 report. Follow these steps for trojans, adware, ransomware, and rootkits on Windows 10 and 11.

Step 1: Disconnect from the Internet

Unplug your ethernet cable or disable Wi-Fi immediately. Malware communicates with command-and-control servers to exfiltrate your data. Cutting the connection stops active theft.

Step 2: Boot into Safe Mode with Networking

Hold Shift while clicking Restart. Navigate to Troubleshoot, then Advanced Options, then Startup Settings, and select Safe Mode with Networking. This loads only essential drivers, preventing most malware from running.

Step 3: Run a Full Antivirus Scan

Open Windows Security and run a full scan under Virus and Threat Protection. If Defender misses the threat, download Malwarebytes Free for a secondary scan. Malwarebytes catches adware and persistent threats that signature-based scanners miss. For ongoing protection, consider a dedicated solution from our best antivirus 2025 rankings.

Step 4: Delete Suspicious Programs and Files

Open Settings, then Apps, then Installed Apps. Sort by install date and remove anything you did not install. Check your Downloads folder and Temp directory (%temp%) for unfamiliar .exe, .bat, or .scr files and delete them.

Step 5: Clear Browser Hijackers

Reset each browser to default settings. In Chrome, go to Settings, then Reset Settings, then Restore Settings to Original Defaults. Remove unknown extensions and verify your default search engine has not been changed.

How to Remove Malware from Mac

Objective-See documented over 20 new macOS malware families in 2025, so Macs are not immune. Disconnect from the internet, then restart in Safe Mode by holding Shift (Intel) or pressing the power button until Loading Startup Options appears (Apple Silicon).

Open Finder, go to Applications, and drag suspicious apps to the Trash. Check Library/LaunchAgents and Library/LaunchDaemons for unfamiliar .plist files malware uses to persist. Run Malwarebytes for Mac (free) to catch remaining infections. Review Login Items under System Settings, remove anything unrecognized, empty the Trash, and restart.

How to Remove Malware from Android

Android faces the highest mobile malware risk, with over 1.2 million malicious apps detected monthly. If you notice signs your phone is hacked like battery drain, data spikes, or unfamiliar apps, act immediately.

Boot into Safe Mode by holding the power button, then long-pressing Power Off until the prompt appears. Go to Settings, then Apps, and uninstall anything suspicious. Revoke Device Admin permissions from unknown entries under Security settings. Run a scan using Bitdefender Mobile Security or Norton Mobile Security. If malware resists removal, factory reset but do not restore app data from backup. See our full guide on how to remove spyware from your phone for detailed steps.

How to Prevent Future Malware Infections

Keep your OS and all software updated, as patches close the vulnerabilities malware exploits. Install a reputable security app with real-time protection on every device. Avoid unofficial download sources, never click links in unsolicited emails, enable two-factor authentication, and schedule weekly antivirus scans.

Frequently Asked Questions

Does a factory reset remove all malware from your device?

A factory reset removes roughly 95% of consumer malware. However, advanced rootkits and firmware-level threats can survive. Always update your OS immediately after resetting and install antivirus software before restoring personal data.

Can malware spread from your phone to your computer?

Yes. Malware transfers via USB connections, shared cloud storage, or synchronized email attachments. Connecting an infected Android device to your PC via USB can trigger auto-run exploits. Always scan transferred files and disable USB auto-run.

How long does it take to fully remove malware?

A straightforward cleanup using Safe Mode and antivirus scanning takes 30 to 90 minutes. Stubborn infections involving rootkits or ransomware may require a factory reset, which takes two to four hours including OS reinstallation and software restoration.