How to Remove Virus From Windows Without Antivirus Software

A virus infection on a Windows PC does not always require installing third-party antivirus software. Windows includes several built-in tools that can help detect, isolate, and remove many types of malware, including Microsoft Defender scans, Safe Mode troubleshooting, system repair tools, and manual cleanup methods.

The right approach depends on what the malware is doing, how deeply it has affected the system, and whether Windows can still start normally.

Removing a virus manually requires care. Deleting random files or registry entries can damage Windows or remove files that are not actually malicious.

The safest process is to identify suspicious behavior, stop the malware from running, use Windows recovery features, and verify that the system is clean afterward.

This guide explains how to remove a virus from Windows without antivirus software, including built-in Windows tools, manual cleanup steps, and what to do when normal methods fail.

Before Removing a Virus, Check Whether Your PC Is Actually Infected

How to Remove Virus From Windows Without Antivirus Software

Not every Windows problem is caused by a virus. Slow performance, crashes, pop-ups, and high CPU usage can also come from outdated drivers, unwanted applications, browser extensions, or failing hardware.

Common signs of a possible virus infection include:

Programs opening or closing without your input
Unknown applications appearing on your computer
Frequent browser redirects or unwanted search changes
Excessive pop-ups outside normal websites
Disabled Windows security features
Unusual network activity
Files becoming encrypted or renamed
High CPU or disk usage when no programs are running
New startup programs you do not recognize

If the problem started immediately after installing a suspicious program, opening an unknown attachment, or downloading unofficial software, malware becomes more likely.

Before deleting anything, disconnect your computer from the internet if you suspect active malware.

Disconnecting Wi-Fi or unplugging the network cable can prevent malware from communicating with external servers or spreading across a network.

Use Windows Security to Scan and Remove Malware

Many people search for ways to remove viruses without antivirus software because they do not realize Windows already includes built-in malware protection. Microsoft Defender Antivirus is part of Windows Security and can scan, quarantine, and remove many threats.

Although Microsoft Defender is technically an antivirus program, it is built into Windows and does not require installing separate security software.

Run a Full Scan With Windows Security

A full scan checks more locations than the quick scan and can find malware hidden in less obvious areas.

To run a full scan:

Open the Start menu.
Search for Windows Security and open it.
Select Virus & threat protection.
Click Scan options.
Choose Full scan.
Select Scan now.

The scan may take a long time depending on your storage size and the number of files. Avoid interrupting it unless Windows becomes unusable.

After the scan finishes, Windows Security will show detected threats and recommended actions. Follow those instructions to quarantine or remove the infected files.

Use Microsoft Defender Offline Scan for Persistent Viruses

Some malware loads before Windows fully starts, making it difficult to remove while the system is running. Microsoft Defender Offline Scan handles this by restarting your computer and scanning outside the normal Windows environment.

To use it:

Open Windows Security.
Go to Virus & threat protection.
Select Scan options.
Choose Microsoft Defender Antivirus (offline scan).
Click Scan now.

Your PC will restart and perform the scan before Windows loads.

This method is useful for rootkits, stubborn malware, and threats that recreate themselves after removal.

Start Windows in Safe Mode

Safe Mode starts Windows with only essential drivers and services. Many viruses rely on startup programs or background services, so removing them becomes easier when they are not running.

How Safe Mode Helps Remove Viruses

A normal Windows startup loads:

User-installed applications
Startup programs
Background services
Third-party drivers

Safe Mode loads a smaller set of components. If malware does not start, you can often remove its files or disable its startup entries.

Start Safe Mode in Windows 11 and Windows 10

Follow these steps:

Press Windows + R.
Type:

msconfig

Press Enter.
Open the Boot tab.
Enable Safe boot.
Select Minimal.
Click Apply and restart.

After cleaning the computer, return to System Configuration and disable Safe boot. Otherwise, Windows will continue starting in Safe Mode.

A better method on newer Windows versions is through Advanced Startup:

Open Settings.
Go to System > Recovery.
Select Restart now under Advanced startup.
Choose Troubleshoot > Advanced options > Startup Settings.
Restart and choose Safe Mode.

Remove Suspicious Programs From Windows

Some malware installs itself like a normal application. Removing unfamiliar programs can eliminate the source of the infection.

To check installed applications:

Open Settings.
Select Apps.
Open Installed apps.
Sort by installation date.
Look for programs you do not recognize.

Pay attention to software installed around the same time the problems began.

Before uninstalling a program, search its name if you are unsure. Some legitimate Windows components and hardware utilities have unfamiliar names.

Avoid deleting random folders from Program Files or Windows directories. A program that looks suspicious may still be a necessary system component.

Stop Malware From Running at Startup

Many viruses survive because they launch automatically every time Windows starts.

Windows includes a startup manager that lets you disable suspicious programs.

Disable Unknown Startup Applications

Press Ctrl + Shift + Esc to open Task Manager.
Select Startup apps.
Review the list.
Disable programs you do not recognize or do not need.

Disabling a startup item does not delete the program. It only prevents it from launching automatically.

If the computer becomes stable after disabling a suspicious startup entry, you can investigate and remove the related software.

Check Running Processes

Task Manager can also help identify unusual activity.

Open Task Manager and check:

Processes using unusually high CPU
Programs consuming large amounts of memory
Unknown applications running in the background

Right-click suspicious processes and select Search online to identify them.

Do not end processes simply because the name looks unfamiliar. Many legitimate Windows services have technical names that are not obvious.

Remove Malicious Browser Extensions and Reset Settings

Some malware does not infect Windows itself but targets web browsers. It may change your homepage, inject advertisements, track browsing activity, or redirect searches.

Check installed extensions in your browser:

Google Chrome

Open Chrome.
Select the three-dot menu.
Go to Extensions.
Remove extensions you do not recognize.

Microsoft Edge

Open Edge.
Select the menu button.
Choose Extensions.
Remove suspicious add-ons.

Also check browser settings:

Search engine changes
Unknown homepage settings
New tab modifications
Notification permissions

If browser problems continue, use the browser reset option. Resetting usually keeps bookmarks and saved passwords but removes unwanted settings.

Delete Temporary Files That May Contain Malware

Temporary folders are common locations where malware hides downloaded components.

Windows Disk Cleanup or Storage settings can remove unnecessary temporary files.

To clear temporary files:

Open Settings.
Go to System > Storage.
Select Temporary files.
Choose files to remove.
Click Remove files.

You can also open the Run dialog and check temporary folders:

Press Windows + R.
Enter:

%temp%

Delete files that Windows allows you to remove.

Some files may be in use by running programs. That is normal. Skip files Windows cannot delete.

Removing temporary files does not remove all viruses, but it can eliminate leftover malware files after a successful scan.

Use Command Prompt Tools to Repair Windows Damage

Some malware damages Windows system files or changes important settings. Built-in repair tools can restore damaged components.

Run System File Checker

System File Checker (SFC) checks Windows system files and replaces corrupted versions.

Open Command Prompt as administrator:

Search for Command Prompt.
Right-click it.
Select Run as administrator.
Run:

sfc /scannow

Wait until the process completes.

If SFC finds problems it cannot repair, use the Deployment Image Servicing and Management tool.

Run DISM Repair

Enter:

DISM /Online /Cleanup-Image /RestoreHealth

DISM repairs the Windows component store that SFC depends on.

These commands do not remove viruses directly, but they help fix Windows issues caused by malware infections.

Check and Remove Suspicious Scheduled Tasks

Some malware uses Windows Task Scheduler to restart itself after removal.

To check scheduled tasks:

Press Windows + R.
Type:

taskschd.msc

Press Enter.
Open Task Scheduler Library.
Look for tasks with:
- Strange names
- Unknown publishers
- Programs running from unusual folders

Be careful before deleting tasks. Windows and installed software use scheduled tasks for legitimate updates and maintenance.

Clean the Windows Registry Carefully

The Windows Registry stores system and application settings. Malware sometimes adds registry entries to maintain persistence.

However, manually editing the registry is risky. Removing the wrong entry can prevent programs from working or cause Windows problems.

If you inspect the registry:

Press Windows + R.
Type:

regedit

Create a backup before making changes.

Common startup locations include:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun

and

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

Look for entries pointing to unknown files or unusual locations.

Only remove entries you can confidently identify as malicious.

Restore Windows if Malware Cannot Be Removed

Sometimes malware changes too many settings or damages too many files. In these cases, system recovery options may be faster and safer than manual cleaning.

Use System Restore

System Restore can return Windows settings and system files to an earlier point.

It does not normally remove personal files, but it can remove recently installed programs and drivers.

To use it:

Search for System Restore.
Open Create a restore point.
Select System Restore.
Choose a restore point from before the infection.

This works only if restore points were enabled before the problem occurred.

Reset Windows

If the infection remains after multiple cleanup attempts, resetting Windows may be the most reliable option.

Windows Reset allows you to choose:

Keep personal files
Remove everything

The “Remove everything” option provides a cleaner start but requires backups first.

Before resetting:

Copy important documents
Save browser bookmarks
Export passwords if needed
Back up photos and personal files

Common Mistakes When Removing Viruses Manually

Manual virus removal often fails because people focus on visible symptoms instead of the cause.

Avoid these mistakes:

Deleting Only the Virus File

Malware often creates multiple files, startup entries, and scheduled tasks. Removing one suspicious file may not remove the infection.

Installing Random Cleanup Tools

Many websites advertise fake virus removers. Some are themselves unwanted programs. Download security tools only from trusted sources.

Ignoring Software Updates

A cleaned computer can become infected again if Windows, browsers, and installed programs have security vulnerabilities.

Restoring Unknown Backups

If your backup contains infected files, restoring everything immediately can bring the malware back.

Scan backup files before copying them to a cleaned system.

How to Prevent Future Virus Infections

After removing malware, improve your system security habits.

Keep these protections enabled:

Windows updates
Microsoft Defender protection
Browser security updates
Automatic app updates

Also:

Avoid pirated software and unofficial installers
Do not open unexpected email attachments
Download programs from official websites
Use strong passwords
Enable multi-factor authentication where available
Keep regular backups

A backup is especially important because some malware, such as ransomware, can damage files even after removal.

Frequently Asked Questions

Can I remove a virus from Windows without downloading antivirus software?

Yes. Windows includes built-in tools such as Microsoft Defender, Safe Mode, Task Manager, System Restore, and Windows repair utilities. These can remove many common infections.

Does deleting suspicious files remove a virus completely?

Not always. Malware may create startup entries, scheduled tasks, registry changes, or additional files. A complete cleanup requires checking how the malware starts and runs.

How do I know if the virus is gone?

Signs that the infection may be removed include normal system performance, no unusual pop-ups, restored security settings, and no suspicious processes or startup programs. Running another Windows Security scan can provide additional confirmation.

Should I reinstall Windows after getting a virus?

Not every infection requires reinstalling Windows. If built-in scans and cleanup methods work, reinstalling is unnecessary. A reset or clean installation is more appropriate when malware cannot be removed or the system has been heavily damaged.

Can Windows Defender remove all viruses?

Windows Defender detects many common threats, but no security tool can guarantee detection of every possible malware variant. Keeping Windows updated and practicing safe browsing habits remain important.

Final Thoughts

Removing a virus from Windows without installing extra antivirus software is possible in many cases.

The safest approach is to use Windows’ built-in security features first, then move to manual troubleshooting methods such as Safe Mode, startup cleanup, and system repair tools.

The key is to avoid deleting files blindly. Identify how the malware starts, remove its ability to run, repair any Windows damage, and confirm that the system is stable afterward.

If the infection continues returning or affects important files, a Windows reset may be the most reliable solution.

If you think there’s been a mistake here, please do let us know by commenting on this post or Contact Us. And a member of our Content Integrity Team will review this decision with you.