Removing a Virus Without Antivirus Software
If your computer shows signs of infection and you lack dedicated antivirus software, you can still remove many viruses using built-in Windows tools and manual cleanup steps. These methods rely on safe mode, system tools, and careful file management to isolate and delete the malware. Success depends on identifying the specific symptoms and applying the right combination of steps.
More from this site
Keep reading the latest coverage
Boot Into Safe Mode
Safe Mode loads only essential Windows drivers and services, which stops many viruses from running at startup. To enter Safe Mode on Windows 10 or 11, hold the Shift key while clicking Restart, then select Troubleshoot > Advanced Options > Startup Settings > Restart, and press F4 or F5 for Safe Mode with Networking. This environment makes it harder for the malware to hide and gives you a cleaner workspace for removal.
End Suspicious Processes in Task Manager
Press Ctrl+Shift+Esc to open Task Manager. Switch to the Details tab and look for processes you do not recognize, especially those using high CPU, memory, or network resources. Right-click a suspicious process and select Open File Location. If the file sits in a temporary or unusual folder, end the task and delete the file. If you are unsure whether a process is legitimate, search its name online before deleting it.
Uninstall Unknown Programs and Browser Extensions
Go to Settings > Apps > Installed Apps (or Programs and Features in the Control Panel) and sort by install date. Remove any programs you did not install or do not recognize. Next, open your browser and check extensions, toolbars, and startup pages. Disable or remove anything unfamiliar, and reset your browser settings to default to clear redirects or unwanted search engines.
Use Built-In Windows Tools
Windows includes tools that can help clean up infections. Run Disk Cleanup to delete temporary files where malware often hides. Use the built-in Microsoft Defender offline scan, which can detect and remove threats even without a full antivirus suite. You can also run System File Checker by opening Command Prompt as administrator and typing sfc /scannow to repair corrupted system files the virus may have modified.
Delete Startup Entries and Scheduled Tasks
Press Ctrl+Shift+Esc, go to the Startup tab, and disable any unfamiliar entries. Open Task Scheduler (taskschd.msc) and look for suspicious scheduled tasks, particularly those pointing to temporary folders or unknown executables. Delete these entries carefully, as disabling the wrong task can affect legitimate software.
Clean the Registry and Temporary Files
Press Win+R, type regedit, and back up the registry before making changes. Search for suspicious keys tied to the malware name or unfamiliar publisher. Delete only entries you are certain are malicious. Afterward, clear the temp folder by typing %temp% in the Run dialog and deleting all contents, then empty the Recycle Bin and restart normally.
Prevent Future Infections
Once the virus is removed, strengthen your defenses. Keep Windows and all software updated, avoid downloading from unverified sources, and enable Microsoft Defender real-time protection. Even without a third-party antivirus, these habits significantly reduce the risk of reinfection.