9 Best Malware Removal Tools of 2026

Malwarebytes is still the first tool we would point an infected PC owner to, because its free version is built for exactly that job. Malwarebytes describes the free scanner as a cleanup tool that finds and removes infections already on your device, and it covers viruses, ransomware, spyware, adware and other malware rather than only junkware. You install it, run a scan, review the detections and quarantine them. If you then want the machine to stay clean, Premium Security runs in real time and blocks scams, phishing and ransomware before they land, with Browser Guard adding web and ad blocking. The Standard plan costs $59.99 per year for 3 devices and Plus adds a VPN for $79.99 per year, with a 60-day money-back guarantee. The limits are clear: the free version only works when you start a scan, and the paid entry price is higher than the first-year deals some suites advertise. For a cleanup today, it costs nothing.

Bitdefender is the strongest choice if you want the tool that cleans your PC to stay on it afterward. Bitdefender Antivirus Free is a permanent free Windows app that, in the company's words, finds and defeats existing viruses, and it then keeps watching the PC with behavior-based detection. The free tier has gaps that Bitdefender lists itself, including no full-system analysis and no anti-tracking, and setup requires a Bitdefender Central account. For stubborn infections the paid Total Security suite has a Rescue Environment: when it detects threats such as rootkits that must be removed before Windows starts, it reboots the computer into that environment to clean up and restore the system. You can try Total Security free for 30 days without a credit card, which is enough to clear a bad infection. If you keep it, Antivirus Plus Multiplatform costs $29.99 for the first year on 3 devices, though renewals are billed at a higher rate.

Emsisoft Emergency Kit is the toolkit to carry on a USB stick when you fix other people's computers. It is fully portable, so nothing gets installed on the infected machine, and Emsisoft says you just delete it after use. It packs the same dual-scanner technology as Emsisoft's endpoint protection, and its cleanup goes beyond deleting files: it quarantines or removes detected objects and their artifacts and restores damaged system settings. The graphical Emergency Kit Scanner suits most users, and the command line scanner, a2cmd.exe, lets technicians script scans with options such as memory, registry traces and archive scanning. Updates come with one click. Emsisoft also promises personal expert malware removal guidance for hard to remove infections. The catch is age of hardware: the current version needs Windows 10 64-bit or Windows Server 2016 and later, so older PCs need another tool. It offers no real-time protection; Emsisoft sells Anti-Malware Home for that.

ESET Online Scanner is a good second opinion when your regular antivirus says the PC is clean but it clearly is not. It is a free download for Windows that launches without installation, runs a full malware scan with a progress bar, and then shows a detailed report where you choose to quarantine or remove each detected item. ESET says it targets viruses, trojans, spyware, ransomware, adware and other threats. Because it is a separate engine from Malwarebytes or Microsoft Defender, it can catch what those missed, and ESET asks for no credit card or long forms. The page is careful to describe it as a one-time scan for a computer, not a website or file checker, and it gives no ongoing protection. After a cleanup ESET suggests its HOME Security Premium trial, which runs for 30 days. Mac users will need a different tool, since the scanner is Windows only.

Every Windows 10 and 11 PC already has a boot-time cleanup tool, and many people never find it. In the Windows Security app, the scan options include Microsoft Defender Antivirus (offline scan). Microsoft explains that it restarts the device and scans without loading Windows, so persistent malware has a harder time hiding or defending itself. It uses the latest definitions, can run without an internet connection, and performs a quick scan of the PC in the Windows Recovery Environment before restarting automatically. Results then appear in the Windows Security app's protection history. That makes it a sensible step after a regular scanner keeps finding the same threat again. The limits are worth knowing. Microsoft describes the offline pass as a quick scan, it will restart the PC mid-task, and Microsoft Defender Antivirus switches itself off if you install a compatible third-party antivirus. It is a free extra layer, not a full substitute for a dedicated scanner.

Norton AntiVirus Plus is the pick for people who would rather pay a little and have someone stand behind the result. Norton says that if your device gets a virus its experts cannot remove, you get your money back, which is a rare promise in this category. The product itself covers viruses, malware and ransomware on one PC, Mac, tablet or phone, and adds AI-powered Scam Protection, a Smart Firewall, a Password Manager and 2 GB of cloud backup. The current US offer is $29.99 for the first year, renewing at $59.99, with a 60-day money-back guarantee. Two caveats. Norton's free tools page no longer lists a standalone free removal scanner, so this is a paid route from the start. And the plan covers only one device, so a household with several infected machines will get more from Malwarebytes Standard or Bitdefender's 3-device plan.

AdwCleaner solves the most common reason people think their PC is infected: a browser that keeps redirecting, a homepage that changed by itself, and pop-ups that will not stop. Malwarebytes built it solely to detect and remove adware, potentially unwanted programs and browser hijackers, and it is free. That narrow focus is both its strength and its limit. Malwarebytes' own FAQ is clear that AdwCleaner targets adware and PUPs, while Malwarebytes Free is the more complete cleanup tool that also removes viruses, trojans, botnets and ransomware. So run AdwCleaner when the symptoms are in the browser, and run a full scanner when files are encrypted, accounts are being hijacked or the PC behaves strangely outside the browser. It gives no ongoing protection, and Malwarebytes asks users to check its regional restrictions page. As a free, fast fix for junkware it is hard to beat.

HouseCall is Trend Micro's free on-demand scanner, and its main selling point is that it plays nicely with whatever you already run. Trend Micro's FAQ says you do not need to remove your antivirus first, which makes it a low-risk second opinion. It detects and cleans viruses, worms, malware and spyware, and Trend Micro says it also looks for malicious software hidden outside of files. You choose a quick scan of critical system files, a full system scan or a custom scan, and the report shows what threats targeted the device. Expect the full scan to be slow: Trend Micro says it can take from a few minutes to several hours depending on drive size and connection speed. After a detection the company recommends installing one of its paid antivirus products. It is a solid free backup scanner, but Malwarebytes, ESET and Emsisoft document more cleanup detail.

Microsoft Safety Scanner is the free fallback for PCs that other tools no longer support. Microsoft describes it as a scan tool designed to find and remove malware from Windows computers and to try to reverse changes made by identified threats. It runs on everything from Windows 11 back to Windows 7 and Windows Server 2008 R2, which is useful for an old family PC that newer scanners such as Emsisoft Emergency Kit will not run on. It is a portable executable, so there is nothing to install, and when you are done you simply delete msert.exe. The detailed log lands in the Windows debug folder. The trade-offs come from its design. Each download expires after 10 days, so you must fetch a fresh copy for current definitions, it scans only when you start it, and Microsoft states plainly that it does not replace a real-time anti-malware product.