How to Safely Remove Malware and a Protected Windows Driver
Question details
The user needs a safe method to remove malware that has left behind protected drivers and scheduled tasks after initial antivirus quarantine.

- Product
- Windows OS
- Device & OS
- Windows
- Scenario
- A malicious application has infected the computer and embedded a protected driver that cannot be manually deleted without risking system instability.
- Observed behavior
- Even after standard antivirus software quarantines the primary threats, residual scheduled tasks and a protected driver remain active on the system.
Immediately disconnect your computer from the network to prevent the malware from spreading or communicating with external servers.
Use Microsoft Safety Scanner for a Full Scan
Run a comprehensive scan using Microsoft's official Safety Scanner to safely detect and automatically remove malicious protected drivers.
Because the malware involves a protected driver, manually deleting system files is highly dangerous and can severely damage Windows. Using an official, automated removal tool ensures the threat is handled without corrupting essential operating system components.
Use a clean, uninfected computer to download the Microsoft Safety Scanner from the official Microsoft website, then transfer it to the infected PC via a USB flash drive.
Launch the executable on the infected machine, accept the terms, and explicitly select the 'Full scan' option to check all system directories and drives.
Wait for the scan to complete and follow the on-screen prompts to quarantine and completely remove the identified malware, associated drivers, and scheduled tasks.

Restore System or Consult a Specialist
If the automated scanner cannot resolve the issue, you must revert to a clean state or seek professional intervention.
Keep Your Documents Secure with WPS Office
While resolving complex system security and driver issues, it is essential to have a reliable, secure environment for your daily tasks. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office, ensuring your workflow remains uninterrupted.
- 1. Download the installer: Navigate to the official WPS Office website and download the free setup file.
- 2. Install the application: Run the setup file and follow the standard installation wizard to configure the software on your system.
- 3. Access your files seamlessly: Open WPS Office to instantly view and edit your existing Microsoft Office documents without any formatting loss.

Frequently Asked Questions
Why shouldn't I manually delete a protected malicious driver?
Manually deleting files associated with protected drivers can corrupt the Windows registry and core system architecture. This often results in a 'Blue Screen of Death' (BSOD) or a system that fails to boot entirely.
Will my regular antivirus remove protected drivers?
Not always. Malicious applications often hook into the operating system at a deep level to protect themselves. While standard antivirus software might remove the primary payload, specialized tools like the Microsoft Safety Scanner or a dedicated malware removal environment are often required to unhook and remove deeply embedded drivers.
How do I know if my system backup is safe to use?
A backup is only safe if it was created prior to the malware infection. If you are unsure when the infection occurred, restoring from an old, verified system image or reinstalling Windows cleanly is the safest approach.




