Introduction
You notice your PC is suddenly sluggish, ads are popping up where they shouldn’t, or your browser keeps redirecting to strange websites. These are classic warning signs that malware — short for malicious software — may have infected your Windows 11 computer.
Malware includes viruses, spyware, adware, and ransomware: software designed to harm, spy on, or exploit your device. It gets in through suspicious email attachments, shady downloads, or malicious websites. The good news is you can remove most infections yourself, for free, using tools already built into Windows 11.
This guide walks you through removing malware from Windows 11 step by step — no tech expertise required.
Quick Answer
To remove malware from Windows 11, open Windows Security → Virus & threat protection → Scan options → select Microsoft Defender Offline scan → click Scan now. This deep scan runs before Windows loads, catching threats that hide from normal scans. For stubborn infections, follow up with a free Malwarebytes scan.
Signs Your Windows 11 PC May Have Malware
Before scanning, check whether your PC shows any of these common symptoms:
- Your PC is significantly slower than usual
- Unexpected pop-up ads appear, even on your desktop
- Your browser homepage or default search engine changed without your input
- Unknown programs appear in your app list
- Windows Security or Task Manager won’t open
- CPU, RAM, or disk usage is unusually high in Task Manager
- Friends report receiving strange messages or emails from your accounts
If you spot two or more of these signs, run a scan right away.
Step 1: Update Windows Defender Before You Scan
Outdated virus definitions mean Windows Defender may miss brand-new threats. Always update before scanning.
- Click Start, type Windows Security, and open the app.
- Click Virus & threat protection.
- Under “Virus & threat protection updates,” click Check for updates.
- Wait for the update to finish before moving on.
Pro tip: Keep automatic updates turned on so Defender’s definitions are always current. Go to Settings → Windows Update and confirm that automatic updates are enabled.
Step 2: Run a Full Scan with Windows Defender
Windows Defender — officially called Microsoft Defender Antivirus — is built into Windows 11 and is genuinely effective. Independent security labs consistently rank it among the best free antivirus options available.
- In Windows Security, click Virus & threat protection.
- Click Scan options.
- Select Full scan (not Quick scan — Full scan checks every file on your PC).
- Click Scan now.
A full scan can take 30–60 minutes depending on how many files you have. Let it run to completion.
Troubleshooting tip: If the scan won’t start or Windows Security refuses to open, that itself can indicate malware actively blocking your defenses. Skip ahead to Step 4 (Safe Mode) or Step 5 (Malwarebytes) to work around it.
Step 3: Run a Microsoft Defender Offline Scan
Some malware digs in deep enough that it cannot be fully removed while Windows is running. The Offline scan restarts your PC and scans before Windows loads — the point where most malware can’t hide or fight back.
- Go to Windows Security → Virus & threat protection → Scan options.
- Select Microsoft Defender Offline scan.
- Click Scan now, then confirm by clicking Scan.
- Your PC restarts automatically and runs the scan (about 15 minutes).
This is the most powerful built-in scan available on Windows 11. Use it whenever you suspect a serious infection.
Step 4: Scan in Safe Mode for Stubborn Infections
If malware is actively blocking your scans, boot into Safe Mode first. In Safe Mode, Windows runs with the bare minimum of programs — most malware can’t load or interfere.
- Click Start → Settings → System → Recovery.
- Under “Advanced startup,” click Restart now.
- Choose Troubleshoot → Advanced options → Startup Settings → Restart.
- Press 4 to start in Safe Mode.
- Once in Safe Mode, repeat Steps 2 and 3.
Step 5: Run Malwarebytes Free (Second Opinion Scan)
No single tool catches everything. Malwarebytes (malwarebytes.com) is a well-trusted free tool that specializes in finding adware, spyware, and potentially unwanted programs that antivirus software sometimes misses.
- Download Malwarebytes from malwarebytes.com (the free version is sufficient).
- Install and open the application.
- Click Scan and let it run to completion.
- Review any detected items and click Quarantine to remove them.
- Restart your PC when prompted.
Pro tip: The free version of Malwarebytes is a manual scanner — it won’t run in the background. That’s fine. Use it after a suspected infection as a second opinion alongside Windows Defender.
Step 6: Remove Suspicious Startup Programs
Malware often adds itself to your startup list so it reloads automatically every time you boot. Checking and cleaning this list is an essential step.
- Press Ctrl + Shift + Esc to open Task Manager.
- Click the Startup apps tab.
- Look for any programs you don’t recognize or didn’t install yourself.
- Right-click a suspicious entry and select Disable.
If you’re unsure whether a program is legitimate, search its exact name online before disabling it. Disabling is safe — you can re-enable anything you need later.
Step 7: Reset Your Browser Settings
Adware commonly hijacks your browser — changing your homepage, default search engine, or installing unwanted extensions. Resetting your browser clears all of this.
In Google Chrome:
- Click the three-dot menu (top right) → Settings.
- Scroll down and click Reset settings.
- Click Restore settings to their original defaults → Reset settings.
Microsoft Edge and Firefox have similar reset options under their Settings menus. Also visit your browser’s Extensions or Add-ons page and remove anything unfamiliar.
Step 8: Repair System Files with SFC
Malware can corrupt Windows system files, causing ongoing problems even after the infection is gone. The System File Checker (SFC) scans for and repairs that damage — completely free.
- Click Start and search for Command Prompt.
- Right-click it and choose Run as administrator.
- Type
sfc /scannowand press Enter. - Wait for the scan to complete (10–15 minutes).
- Restart your PC when it finishes.
If your PC still feels sluggish after removing malware, our guide on How to Speed Up a Slow Windows 11 PC (12 Easy Fixes) covers additional free performance fixes.
Common Mistakes to Avoid
- Only running a Quick Scan. Quick Scans only check the most common infection spots. Use Full Scan or Offline Scan for a thorough clean-up.
- Downloading “anti-malware” tools from pop-up ads. Fake security warnings that say “Your PC is infected — click here to fix it” are scams or malware in disguise. Only download tools directly from trusted sites like malwarebytes.com or microsoft.com.
- Skipping the browser reset. Even after removing malware, a hijacked browser keeps redirecting you. Always check your extensions and reset browser settings.
- Paying for “PC cleaner” tools that appear after a scare. Legitimate malware removal is free. Windows Defender and Malwarebytes Free handle the vast majority of infections at no cost.
- Not restarting after quarantine. Some files are fully removed only on restart. Always reboot after any scan that detects threats.
- Ignoring Windows Update. Many infections exploit unpatched vulnerabilities. Keeping Windows 11 up to date closes those doors. If Windows Update isn’t cooperating, see our guide on How to Fix Windows Update Not Working on Windows 11.
Frequently Asked Questions
Does Windows 11 have built-in malware protection?
Yes. Microsoft Defender Antivirus is built into Windows 11 and active by default. It provides real-time protection, cloud-based detection, and Offline scanning — all at no cost, with no installation needed.
How do I know if my PC has a virus?
Common signs include sudden slowdowns, unexpected pop-ups, browser redirects, unfamiliar installed programs, or unusually high CPU or disk usage in Task Manager. If you notice two or more of these, run a Full Scan right away.
Is the Malwarebytes free version good enough?
Yes, for manual clean-up after a suspected infection. The free version scans and removes existing threats. You don’t need the paid tier unless you want continuous real-time protection layered on top of Windows Defender.
Can malware survive a Windows 11 reset?
Very rarely. A full Windows reset that removes all files and apps eliminates almost all malware. Firmware-level infections and threats on connected external drives are the rare exception. A full reset is a last resort — the steps in this guide handle the vast majority of infections.
How long does a full Windows Defender scan take?
Typically 30–60 minutes, depending on how many files are on your PC. A Microsoft Defender Offline Scan takes around 15 minutes because it runs before Windows fully loads.
What should I do if malware keeps coming back?
Scan your startup programs and browser extensions carefully, and also run a scan on any connected external drives. If threats keep reappearing, try the Microsoft Defender Offline scan from Safe Mode for the deepest possible clean. As a last resort, a clean reinstall of Windows 11 will eliminate any persistent infection. If Windows is also freezing or behaving erratically, tackle that alongside the malware removal.
Do I need a paid antivirus on Windows 11?
For most home users, Windows Defender combined with careful browsing habits provides solid protection. Paid antivirus suites add extras like VPN access, password managers, and identity monitoring — useful, but not required for strong baseline security.
Conclusion
Removing malware from Windows 11 doesn’t require expensive software or a trip to a repair shop. Update Windows Defender, run a Full and Offline scan, follow up with Malwarebytes, clear suspicious startup programs, reset your browser, and repair system files with SFC. Most infections clear up completely with these free, built-in tools.
Once you’re clean, stay protected by keeping Windows 11 updated, being cautious with email attachments, and downloading software only from trusted sources.
Found this helpful? Browse our other free Windows 11 fix guides and solve your next tech problem in minutes.