Factory reset removes most viruses, but not all of them

A factory reset (also called a hard reset or factory restore) wipes your device back to the state it shipped in, erasing everything you've added since. This removes the vast majority of viruses, malware, and spyware because those programs live in your files and settings, which get deleted. However, a factory reset is not a may provide cure. Some sophisticated malware can hide in parts of your device that a standard reset does not touch, and a few types of malware can reinstall themselves if you restore from a backup that contains the infection.

Whether a factory reset will solve your problem depends on what kind of malware you have, how deeply it has embedded itself, and what you do after the reset. For most common viruses and spyware, a reset works. For persistent or advanced threats, you may need additional steps.

Key Takeaways

  • A factory reset erases files and settings where most viruses live, so it removes the majority of common malware infections.
  • Some advanced malware can survive a factory reset by hiding in firmware or system partitions that the reset does not touch.
  • If you restore from a backup after resetting, you can reinfect your device if that backup contains the malware.
  • After a factory reset, avoid restoring old backups and install security software before reconnecting to the internet.

What a factory reset actually deletes

When you perform a factory reset on a Windows computer, Mac, iPhone, or Android device, the operating system erases your user files, installed programs, browser history, saved passwords, and custom settings. It then reinstalls a clean copy of the operating system from a protected system partition. This process removes the files where viruses and malware typically hide — in your Documents folder, Program Files, Downloads, or app storage.

Most consumer-level malware (viruses, trojans, spyware, adware, ransomware) lives in these user-accessible areas. When they get deleted, the malware is gone. Your device will run as if it just came from the factory, because it essentially has.

Types of malware that can survive a reset

Some malware is designed to persist even after a factory reset. Firmware-level malware embeds itself in the low-level code that runs before the operating system loads — code that a standard factory reset does not touch. This is rare in consumer devices but possible, especially if a device was compromised at a network level or by someone with physical access.

Bootkit malware modifies the boot sector or bootloader, the code that starts your device. A factory reset may not overwrite this if the malware has protected it. Again, this is uncommon in typical consumer infections but exists in sophisticated attacks.

The most common way malware survives a reset is not through technical persistence but through your own actions: restoring from a backup that contains the malware. If you back up your device while it is infected, then reset it, then restore that backup, you have just reinfected yourself.

How to reset your device safely

On Windows: Go to Settings > System > Recovery, then select "Reset this PC." Choose "Remove everything" to delete all files. Windows will ask whether to reinstall from the cloud or from local files — either option works. The process takes 30 minutes to an hour.

On Mac: Restart your Mac and hold Command + R to enter Recovery Mode. Select "Erase Mac" from Utilities, then reinstall macOS. This erases your drive and installs a fresh copy of the operating system.

On iPhone: Go to Settings > General > Transfer or Reset > Erase All Content and Settings. The device will restart and return to setup mode. Do not restore from iCloud backup immediately afterward.

On Android: Go to Settings > System > Reset Options > Erase All Data (Factory Reset). The exact path varies by manufacturer. After the reset completes, set up the device as new rather than restoring from backup.

What to do after you reset

After a factory reset, your device is clean but vulnerable. Do not immediately restore from your old backup, because if that backup contained malware, you will reinfect yourself. Instead, set up your device as new and reinstall only the programs and files you actually need.

Before you reconnect to the internet or log into accounts, install security software. On Windows, Windows Defender (built in) is sufficient for most users, but you can also install Malwarebytes or Bitdefender. On Mac, the built-in XProtect is adequate for most threats. On iPhone and Android, the built-in security is generally strong enough if you only install apps from the official app store.

Once your device is set up and protected, you can restore specific files from backup if you have them stored separately (like photos in cloud storage or documents in Google Drive). Avoid restoring system-level backups or your entire user profile from the old backup.

When a factory reset is not enough

If your device shows signs of malware after a factory reset, the infection may be at the firmware level or you may have reinfected it during setup. In this case, you have a few options. On Windows, you can try a clean Windows installation using installation media from Microsoft, which overwrites more of the system than a standard reset. On Mac, you can use Internet Recovery to reinstall macOS from Apple's servers. On iPhone or Android, contact the manufacturer's support line — they can advise whether a deeper recovery process is needed.

For most people, a factory reset solves the problem. For the small percentage whose malware survives, professional support or manufacturer recovery tools are the next step.

Frequently Asked Questions

Will I lose all my files if I do a factory reset?

Yes. A factory reset erases everything on your device — all files, photos, programs, and settings. Before you reset, back up any files you want to keep to an external drive or cloud storage (like Google Drive or OneDrive), but do not restore from a backup of your entire device if it was infected.

Can malware hide in my cloud backup?

Cloud backups (iCloud, Google Drive, OneDrive) store your files and settings, not the operating system itself. If malware was in those files when you backed up, it will be in the backup. However, most malware does not survive in cloud storage the way it does on your device. When you restore files individually, the risk is lower than restoring an entire system backup.

How long does a factory reset take?

On most devices, a factory reset takes 30 minutes to two hours, depending on the device and how much data was on it. Windows and Mac resets are usually slower than iPhone or Android resets. Your device will restart several times during the process.

Do I need to unplug my device during a factory reset?

No. Keep your device plugged in during a factory reset. If the power dies mid-reset, your device may not boot properly afterward. A wired connection is safer than relying on battery.

Should I factory reset if I just have a slow device?

A factory reset can speed up a slow device, but only if the slowness is caused by too many programs, files, or settings. If your device is slow because of malware, a reset helps. If it is slow because the hard drive is full or the hardware is old, a reset will not fix it permanently.