13 Free Virus Scan & Removal Tools That Work

Table of Contents >> Show >> Hide

Quick picks (so you can stop panic-scrolling)
What “free” actually means in antivirus land
Before you scan: a 5-minute prep that improves results
The 13 free virus scan and removal tools that actually work
How to choose the right tool (based on symptoms)
A practical cleanup workflow (the order that usually works best)
After removal: 7 steps that prevent “the sequel”
Common mistakes that make free tools look “broken”
Final thoughts
Experiences & real-world scenarios (the stuff that actually happens)
SEO tags (JSON)

Viruses and malware are like glitter at a craft party: they show up uninvited, spread everywhere, and you’ll still find a piece of them three weeks later.
The good news? You don’t always need to pay to clean up a mess. The even better news? Some free tools are genuinely excellentespecially when you use them
in the right order.

This guide covers 13 free virus scan and removal tools that actually work (not “free for 12 minutes unless you hand over your credit card”).
You’ll also get a practical cleanup playbook, what each tool is best at, and how to avoid re-infecting your system five minutes after you celebrate.

Quick picks (so you can stop panic-scrolling)

Best built-in option: Microsoft Defender Antivirus
Best for stubborn infections: Microsoft Defender Offline Scan
Best “second opinion” cleanup: Malwarebytes Free
Best for browser junk (adware/hijackers): Malwarebytes AdwCleaner
Best aggressive remover (use carefully): Norton Power Eraser
Best lightweight one-time scan: ESET Online Scanner

What “free” actually means in antivirus land

“Free” can mean three different things, and the difference matters:

Free, built-in protection: Comes with your OS (like Microsoft Defender). It runs all the time and updates quietly in the background.
Free on-demand scanners: Tools you run when you suspect malware. Great for a “second opinion,” and often better at cleanup.
Free trialware wearing a fake mustache: Free for a short time, then paywalls key features. This article avoids those whenever possible.

Also: “virus” is now shorthand. Most real-world infections are a mix of malware, spyware, adware, browser hijackers, potentially unwanted programs (PUPs),
and occasionally something nastier like a rootkit. That’s why using more than one toolstrategicallyoften works best.

Before you scan: a 5-minute prep that improves results

Disconnect from the internet if you’re seeing pop-ups, fake alerts, or suspicious remote activity.
Back up critical files (documents/photos). If ransomware is involved, don’t plug in backup drives until you’re sure you’re clean.
Close your browser and any apps you don’t need. Fewer running processes = fewer hiding places.
Update your tools (or re-download on-demand scanners) so they’re using current threat definitions.
Consider Safe Mode if malware keeps reappearing or blocks scans. Less malware runs in Safe Mode, so removal can be easier.

If your PC is so infected it can’t stay stable long enough to scan, skip ahead to Microsoft Defender Offlineit’s made for exactly that situation.

The 13 free virus scan and removal tools that actually work

Built-in Windows cleanup crew

If you’re on Windows, start here. These tools are free, legit, and designed to work with the OS (which helps when malware changes system settings).

1) Microsoft Defender Antivirus

Best for: Everyday protection, fast scans, and “I just want something reliable that’s already there.”

Microsoft Defender (inside Windows Security) is the baseline you should keep enabled unless you’re replacing it with another reputable antivirus.
It’s not flashy, but it’s integrated, updates regularly, and is usually the quickest way to run a clean scan when something feels off.

Use it when: You want a quick scan, a full scan, or to quarantine obvious threats.
Bonus move: Run a Full scan, then follow with an on-demand second-opinion tool (like Malwarebytes Free).

How to use (simple version): Open Windows Security → Virus & threat protection → choose Quick/Full scan.

2) Microsoft Defender Offline Scan

Best for: Rootkits, persistent malware, and infections that “magically” survive normal scans.

Offline scanning is the cybersecurity equivalent of turning on the lights at a surprise partymalware that’s good at hiding during normal Windows
operation often can’t hide when the scan runs outside the regular Windows environment.

Use it when: You suspect a rootkit, boot-level malware, or repeated reinfection.
Heads-up: It reboots your PC and runs the scan before Windows loads fully, so plan a few minutes of downtime.

How to use: Windows Security → Virus & threat protection → Scan options → Microsoft Defender Offline scan.

3) Windows Malicious Software Removal Tool (MSRT)

Best for: Quick cleanup of prevalent malware families and undoing certain malicious changes.

MSRT is a Microsoft tool that targets specific widespread malware. Think of it as a monthly “sweep” for common threatsuseful, but not a full replacement
for an antivirus or a modern anti-malware scanner.

Use it when: You want an extra Microsoft-backed pass for common infections.
Don’t expect: Deep detection of every PUP/adware flavor under the sun.

How to use: Run it when available via Windows Update, or download the standalone MSRT and run a Quick or Full scan.

4) Microsoft Safety Scanner (MSERT)

Best for: A portable, on-demand “Microsoft second opinion” that can find and remove malware.

Microsoft Safety Scanner is an on-demand malware scan tool designed to find and remove malware. It’s particularly handy when you want a Microsoft-branded
cleanup tool without installing a full security suite.

Use it when: Defender finds something suspicious, or you want another scan engine to confirm you’re clean.
Pro tip: Re-download it if you’re running it again later, since it’s meant for short-term use.

How to use: Download → run → choose Quick/Full/Custom scan → remove/quarantine findings.

Second-opinion scanners (the “show me what I missed” squad)

These tools shine when your main antivirus says “all good” but your browser is acting like it joined a circus.
Many are especially good at removing PUPs, adware, spyware, and other junk that bogs systems down.

5) Malwarebytes Free

Best for: Malware removal and cleanupespecially as a second-opinion scanner.

Malwarebytes Free is popular for a reason: it’s straightforward, it’s good at cleanup, and it tends to catch a lot of the “annoying stuff” that slips
through basic defenses. The free version is typically used for scanning and removing threats on-demand (not as always-on protection).

Use it when: You suspect malware, trojans, ransomware droppers, spyware, or suspicious browser behavior.
Best practice: Run it after a Defender Full scan for a strong one-two punch.

How to use: Install → update → run Threat Scan → quarantine/remove → reboot if prompted.

6) Malwarebytes AdwCleaner

Best for: Adware, browser hijackers, toolbars, and potentially unwanted programs (PUPs).

If your homepage changed “by itself,” your search engine got swapped, or every website now has extra pop-ups… AdwCleaner is your new best friend.
It’s focused: it targets adware and browser junk instead of trying to be everything for everyone.

Use it when: Your browser is hijacked, you have persistent pop-ups, or new “helpful” toolbars appeared.
Nice touch: It’s lightweight and doesn’t require a full suite install.

How to use: Download → Scan → review detections → Quarantine → reboot if needed.

7) Norton Power Eraser

Best for: Aggressive detection of stubborn or deeply embedded threats.

Norton Power Eraser is a free removal tool designed to detect and remove hard-to-remove malware. It’s intentionally more aggressive than many standard
scanners, which can help with nasty infectionsbut also raises the risk of false positives.

Use it when: You’re still seeing symptoms after multiple scans, or you suspect a particularly stubborn infection.
Watch-outs: Review results carefully before removing. When in doubt, quarantine first.

How to use: Download → run scan → review findings → remove only what you’re confident is malicious.

8) ESET Online Scanner

Best for: A free one-time scan that can remove malware without permanently switching your antivirus.

ESET’s Online Scanner is designed for a one-time scan and cleanup. It’s a solid “second opinion” tool when you want an extra engine checking your system
without committing to a full product change.

Use it when: You want an on-demand scan that can catch viruses, trojans, spyware, and other common threats.
Good fit: You already have antivirus installed but want another scan engine’s perspective.

How to use: Download/launch → run scan → remove/quarantine → reboot if prompted.

9) Trend Micro HouseCall

Best for: Easy, free scanning and cleaning for common malware and spyware.

HouseCall is a free scanner intended to detect and remove viruses, malware, spyware, and other threats. It’s simple, lightweight, and useful when you want
a quick “is anything gross in here?” check.

Use it when: Your PC feels infected, you want a second opinion, or you’re troubleshooting odd performance issues.
Great for: People who want minimal setup and a straightforward scan.

How to use: Download → run → choose scan type → clean detected threats.

10) Trellix Stinger

Best for: Targeted removal of specific threats and “stubborn infection” troubleshooting.

Stinger is a standalone utility that detects and removes certain threats listed by the tool. It’s not meant to replace a full antivirus, but it can be very
helpful as part of a cleanup toolkitespecially when you need a quick targeted remover.

Use it when: You’re dealing with a known infection family or you need a fast, portable scan attempt.
Don’t expect: Full-suite protection or comprehensive “everything” scanning like a full antivirus.

How to use: Download → run → (optional) adjust settings → scan → remove detected threats.

Free everyday antivirus options (for ongoing protection)

If you want always-on protection beyond the Windows default, these are widely used free antivirus options. They’re not magic shields, but they can offer
real-time protection and additional layersjust keep an eye on upsell prompts and optional add-ons during installation.

11) Avast Free Antivirus

Best for: Free real-time protection and broad mainstream coverage.

Avast’s free antivirus is built for everyday threat protection, including common malware and scammy downloads. It’s often used as a primary antivirus for
people who want more than the Windows baseline (or prefer Avast’s tooling).

Use it when: You want ongoing antivirus protection with a well-known free product.
Tip: During install, choose a “custom” path if offered so you can skip extras you don’t want.

How to use: Install → update → enable real-time protection → run a Full scan after install.

12) AVG AntiVirus Free

Best for: Free real-time antivirus protection with a familiar, mainstream interface.

AVG AntiVirus Free provides real-time protection against viruses and other common threats. It’s a long-running name in consumer security and can be a good
“set it and forget it” option if you want a free standalone antivirus.

Use it when: You want free real-time antivirus coverage beyond built-in tools.
Tip: After installation, run a Full scan and review any flagged browser extensions.

How to use: Install → update definitions → run Full scan → keep real-time protection enabled.

13) Avira Free Security

Best for: A free security suite that combines scanning with broader “device health” checks.

Avira’s free offering is positioned as an all-in-one security and utility bundle. If you like a “single dashboard” that covers antivirus scanning plus some
basic system checks, it can be a good free option.

Use it when: You want free antivirus plus lightweight extras in one place.
Tip: Focus on the security features first; don’t let “cleanup” suggestions trick you into deleting things you need.

How to use: Install → run Smart Scan → follow up with a Full scan → remove/quarantine threats.

How to choose the right tool (based on symptoms)

Don’t throw 13 scanners at your PC like you’re casting spells. Use the tool that matches the problem:

Pop-ups, toolbars, hijacked homepage/search: Start with Malwarebytes AdwCleaner, then Malwarebytes Free.
PC slow, fans screaming, weird background activity: Defender Full scan → Malwarebytes Free → ESET Online Scanner.
Repeated reinfection or “nothing found” but symptoms remain: Microsoft Defender Offline → Norton Power Eraser (carefully).
Known “family” or targeted removal attempt: Trellix Stinger as a quick supplemental tool.
You just want baseline protection: Microsoft Defender (built-in) or a free antivirus like Avast/AVG/Avira.

A practical cleanup workflow (the order that usually works best)

Run Microsoft Defender Full scan. Quarantine anything it flags.
Run Malwarebytes Free Threat Scan. Quarantine/remove and reboot if prompted.
Run AdwCleaner if you have browser problems, redirect spam, or suspicious extensions.
Run one extra second opinion (ESET Online Scanner or Trend Micro HouseCall) to confirm you’re clean.
If symptoms persist: Run Microsoft Defender Offline. After that, consider Norton Power Eraser with careful review.

This sequence avoids the common trap of repeatedly scanning the same way and expecting a different result. Different tools are good at different layers:
real-time protection, on-demand cleanup, browser junk, and offline/rootkit-level threats.

After removal: 7 steps that prevent “the sequel”

Update Windows (and restart). Many infections exploit old vulnerabilities.
Update your browser and remove suspicious extensions you don’t recognize.
Change passwords (especially email/banking) if you saw credential-stealing signs.
Enable MFA on your key accounts. It’s the bouncer at the door.
Check startup apps and scheduled tasks for unknown entries.
Re-scan once after reboot to confirm threats didn’t respawn.
Back up to an external drive or cloudthen disconnect the external drive when done.

If you’re still getting fake “Your PC is infected!” browser alerts after cleaning, that’s often browser notification spam, not an active virus.
Turn off suspicious site notifications in your browser settings and re-check extensions.

Common mistakes that make free tools look “broken”

Running five tools at once: You’ll create conflicts and false alarms. One at a time, with reboots when asked.
Ignoring scan results because “it might be wrong”: Quarantine first; you can restore if needed.
Not updating definitions: Old signatures miss new malware. Re-download on-demand tools when appropriate.
Skipping the browser: Many “virus” symptoms are really hijacked extensions or notification spam.
Reinfecting yourself: Reinstalling the same cracked software or clicking the same sketchy “download” button undoes everything.

Final thoughts

Free virus scan and removal tools can absolutely workif you treat them like a toolkit, not a lottery ticket. Start with a solid baseline (Defender), add a
second-opinion remover (Malwarebytes), and use specialty tools (AdwCleaner, Offline scan, Power Eraser) when symptoms demand it.

And remember: the best malware removal is the kind you never need. Patch your system, keep a clean backup, and be suspicious of anything that says
“CLICK HERE IMMEDIATELY!!!” in 72-point font.

Experiences & real-world scenarios (the stuff that actually happens)

The internet loves dramatic “my PC was hacked” stories, but most infections are less Hollywood and more “my browser now thinks it’s a billboard.”
Below are realistic scenarios people run intoand what tends to work best in each case.

Scenario 1: The “My homepage changed and now it’s allergic to Google” moment

A very common “virus” report is actually a browser hijacker: your default search engine flips, your homepage becomes a random site you’ve never heard of,
and every click takes a scenic detour through a redirect chain. The key clue is that the PC mostly worksuntil you open a browser.

In these cases, a full antivirus scan might find nothing because the “infection” is living as an extension, a PUP, or a policy change. The most reliable fix
is usually to start with Malwarebytes AdwCleaner (because it’s built for hijackers and PUPs), then run Malwarebytes Free for a deeper cleanup. After that,
reset the browser settings, remove unknown extensions, and disable shady notification permissions. The win is not just removing the junkit’s also removing
the mechanism that keeps putting the junk back.

Scenario 2: The laptop gets slow overnight, but scans say “all clear”

This is where “second opinions” earn their keep. A machine can be slow for normal reasons (updates, storage, overheating), but malware is still on the list.
A practical approach is: run Microsoft Defender Full scan first, then Malwarebytes Free. If the system still feels off, follow with ESET Online Scanner or
Trend Micro HouseCall for a different scan engine’s view.

The sneaky part: even if you remove malware, you might still have lingering effectsbroken browser settings, unwanted startup entries, or “helpful” apps
that reinstall adware. That’s why the post-cleanup steps matter: check startup programs, update Windows, and remove weird extensions. Cleanup isn’t just
deleting a bad file; it’s undoing what the bad file did while it was freeloading.

Scenario 3: The “It won’t let me run scanners” infection

Some threats actively block security toolsclosing them, preventing downloads, or breaking Windows tools. When that happens, the most effective move is to
stop arguing with the malware inside Windows and scan from outside it. That’s exactly why Microsoft Defender Offline exists: it reboots into a trusted
environment and scans before Windows loads normally.

If Offline scan improves things but symptoms remain, a careful run of Norton Power Eraser can help find aggressive threats that typical scanners miss. The
“careful” part matters because aggressive tools can occasionally flag legitimate software. In these cases, quarantine-first is your friend. It’s the
cybersecurity equivalent of putting a suspicious sandwich in a baggie instead of immediately throwing out your entire fridge.

Scenario 4: You cleaned it… then it came back (the horror sequel)

Reinfection is usually not a mystery villainit’s the same culprit returning through the same door. Common causes include re-downloading the same infected
installer, syncing a malicious browser extension back from your profile, or plugging in an external drive that contains infected files or shady “autorun”
leftovers.

The fix is process-based: after cleaning, update everything, change passwords if needed, and audit the things that “reinstall” your environmentbrowser
sync, cloud storage, startup items, scheduled tasks. Then re-scan once more. A clean scan after a reboot is the closest thing to a receipt that says,
“Yes, you actually removed it.”

Scenario 5: The “I just want something free that I can trust” reality

The honest truth is that free tools can be enough for many people if you combine: (1) a reputable baseline antivirus, (2) occasional second-opinion scans,
and (3) sane download habits. Microsoft Defender plus periodic Malwarebytes Free scans is a very practical combo. Add AdwCleaner when browsers get weird,
and keep Defender Offline in your back pocket for stubborn infections.

The goal isn’t to install 10 security apps and hope they fight each other like Pokémon. The goal is a small, smart toolkit you understandso when something
feels off, you know exactly what to run and why.

Evan Porter