Windows Malware Removal Checklist

By Malware-Bytes.net Editorial Team · Published 2026-08-12 · Updated 2026-08-28

Contain

• Disconnect the network if ransomware or data theft is suspected
• Stop entering credentials on the PC
• Note what changed and when

Clean

• Update the threat database and run a threat scan
• Quarantine detections and reboot
• Run AdwCleaner if there are ads, toolbars or redirects
• Review startup entries, scheduled tasks and services
• Reset browsers and check shortcut targets
• Escalate to Safe Mode with rootkit scanning if anything returns

Recover

• Change passwords from a clean device, starting with email
• Enable two-factor authentication
• Install Windows and browser updates
• Verify backups restore
• Run one more scan after 48 hours

Frequently asked questions

How do I know the PC is finally clean?

Two consecutive clean scans across a reboot, normal idle resource usage, and no recurrence of the original symptoms after a couple of days.

Keep reading

• How to Remove Malware From WindowsThe full cleanup workflow, including stubborn cases.
• What to Do After Detecting MalwareCleanup is step one, not the last step.
• Malwarebytes Virus RemovalA start-to-finish cleanup process for an infected PC.
• Windows PC Security GuideThe pillar guide tying the whole cluster together.

Malware-Bytes.net is an independent information resource about malware protection for Windows. We are not Malwarebytes, and this site is not the official Malwarebytes website or support channel. Malwarebytes is a trademark of Malwarebytes Inc.