For a typical home user on Windows, the easiest safe route is: run a reputable antivirus/anti‑malware scan (Defender or a trusted tool like Malwarebytes), remove what it finds, then reset browsers and change passwords; if problems persist, back up files and reinstall Windows.
Below is a simple, low‑faff workflow you can pass on to non‑technical family/friends; as a power user you can skip or harden steps as you like.
First actions
- Disconnect from the internet (pull Ethernet, toggle Wi‑Fi) to limit data exfiltration while cleaning.
- Note obvious symptoms (pop‑ups, redirects, unknown programs, AV disabled); this helps decide later if a full reinstall is needed.
Easy cleaning path (Windows 10/11)
- Uninstall junk: Control Panel → Programs and Features → remove toolbars, "optimizer/booster" apps, and anything recently installed that is not recognised.
- Empty Recycle Bin and reboot once to clear locked files and finish uninstalls.
- Run Microsoft Defender:
- Open Windows Security → Virus & threat protection → Quick scan, then a Full scan.
- If malware persists or is "severe", run Microsoft Defender Offline (same menu → Scan options → Microsoft Defender Offline → Scan now), which reboots and scans before Windows loads.
- Run a second‑opinion malware scanner (one‑off, on‑demand):
- Malwarebytes Free for general malware/spyware and PUPs; install, run a Threat Scan, quarantine, reboot.
- Optionally add "AdwCleaner" for adware and browser hijackers; it is lightweight and purpose‑built.
Browser and account clean-up
- In each browser:
- Remove unknown extensions; reset homepage, default search, and new‑tab settings.
- Clear cookies/site data to kill tracking and adware sessions.
- Change passwords from a **known‑clean device** (PC/phone that is not misbehaving):
- Prioritise email, banking, shopping, social accounts, and anything reused.
- Enable 2FA where possible to blunt any stolen credentials.
When to stop and reinstall
- Recommend a full Windows reset ("Reset this PC" → remove apps, keep files; or full wipe) if:
- AV/Defender will not run, or malware reappears after cleaning.
- There are signs of rootkits or very persistent backdoors (drivers/services that keep returning).
- For a non‑technical home user, a clean reinstall with backups is often the **safest** way to be confident the system is trustworthy again.
If you say what OS/devices you specifically care about (Windows box, Android, iPhone, etc.), a more tailored, step‑by‑step flow can be laid out for each.