How to remove Trojan virus from Windows, Mac, Android and iPhone

A trojan virus is a kind of malware (malicious software) that disguises itself as an ordinary software file. In 2025, the threat is growing, with trojans representing 58% of all malware attacks. These viruses are a critical system threat because they can take control of your device, enable remote access and control of your computer, and siphon off your personal data.
The best first line of defense against trojans is to have a robust antivirus program that protects you from malware in real time and blocks malicious downloads. However, each operating system faces different trojan threats and requires a tailored approach for trojan removal. That’s why my team and I dedicated several months to investigating the latest trojan threats, and removal and prevention methods.
In this guide, I’ll provide the results of my in-house tests, including practical tips for detecting and removing Trojan viruses from different devices and how to prevent them in future.
How to remove a trojan virus in 5 steps
- Get a trojan antivirus. I recommend TotalAV, now 80% off.
- Disconnect the internet to block malicious activities from the trojan.
- Run a full system scan to detect and remove trojans.
- If unsuccessful, boot up your Windows or Mac device in Safe Mode.
- Run a second full scan to detect and remove stubborn trojan viruses.
What is a trojan virus?
Trojan viruses are a type of malware that hides inside a legitimate software file or app, making them very difficult to detect and avoid. The name comes from Greek mythology, in which the Greeks tricked the Trojans into opening the gates of Troy by hiding inside a large wooden horse. Trojan viruses do the same thing to try and sneak onto your device undetected.
A typical computer virus spreads from one system to another by infecting legitimate apps or files. However, trojans keep themselves hidden until they're installed and can perform an assigned task. This might include downloading other malware, creating a backdoor entry for a remote attacker, or stealing sensitive data.
One of the most well-known trojans since 2007 is the Zeus trojan, which steals financial information and adds your computer to a botnet – an infected network of computers that can be hijacked for cybercrime. Before it was taken offline, Interpol reported that a similar financial theft trojan called Emotet was responsible for 20% of malware infections.
Due to the risks involved with your personal data and finances, understanding how to know if you have a trojan virus is crucial.
How to know if you have a trojan virus
Trojan viruses tend to make their way onto your device as a result of a direct download. You may have downloaded an infected, legitimate software app from an untrustworthy source. In some cases, hackers can use social engineering tactics to get you to download a trojan that’s attached to an email. Whether you’re already suspicious or not, there are some clear signs of a trojan virus to watch out for.
- Sluggish device performance: If your device and apps feel like they're running more slowly than usual for no reason, it could be due to a trojan virus taking up processing power and slowing down your computer.
- Random pop-up messages: If you're not using a pop-up blocker and see more ads than usual, it could be a sign of a malware infection. Trojans can force malicious pop-ups as well as redirecting your browser sessions to infected sites.
- Unauthorized applications: Since trojans disguise themselves as legitimate apps, you might notice applications that you didn’t install. Check your Activity Monitor on Mac or Task Manager on Windows to look for suspicious applications.
- Disabled antivirus software: One of the tricks trojan viruses use is to disable your antivirus software. If your antivirus isn’t working properly and you can’t figure out why, it could be the result of a trojan infection.
Above all, it’s important to act fast if you suspect a trojan. Take Emotet for example; a sophisticated Trojan that usually spreads through phishing emails. Once infected, Emotet can remain hidden, exploiting vulnerabilities in your device software. It can install more malware, ransomware, banking Trojans, or keyloggers. Over time, this can lead to data breaches, financial losses, or remote device takeover.
If you’re noticing unusual device behavior, I recommend scanning your device with one of the best trojan removers. TotalAV offers a 100% detection rate for trojans and is capable of detecting stealthy malware like Emotet.
Best Trojan removers to protect your devices in 2025
-
Best trojan virus scanner and remover software
-
Affordable antivirus to remove trojan virus from your device
-
Powerful antivirus with 100% success removing trojans
To successfully remove a Trojan virus from your device, you first need a truly reliable antivirus that is capable of detecting and removing it. To make it easier for you, we tested 20 providers and selected the top 3 Trojan removers that truly work in 2025. Therefore, if you're unsure which one to choose, read our detailed overview here.
How to detect and remove Trojan virus from different devices: detailed guide
The process for removing a trojan virus can differ slightly depending on your device, but regardless of your device, the first step is to get a reliable antivirus that is proven in detecting and removing trojan malware. Once you’ve downloaded an antivirus, you’ll be able to scan for trojan infections – I recommend choosing TotalAV for 100% proven trojan detection.
Remove a Trojan virus from Windows 11, 10 and older versions
Trojans can infect all versions of Windows, with older versions being more susceptible due to outdated software. Vulnerabilities are more common in versions that have been around for some time, such as Windows 7 and 8. Windows 10 offers better security, but it's still not as robust as Windows 11.
Windows devices tend to see remote-access trojans, spy trojans, downloader trojans, and banking trojans most commonly. Here’s how to remove a trojan virus from Windows 11, 10, and older versions:
-
Get a reliable trojan scanner. I recommend choosing TotalAV, with 100% trojan removal success — plus, it was ranked as the top antivirus for Windows 10 and Windows 11 in my colleague's research.
- Disconnect the internet to ensure the trojan can’t transmit any sensitive data.
- Open your antivirus and run a scan. I recommend a full scan in this instance. If the trojan is detected, it’ll automatically be quarantined and removed.
-
If it doesn’t work, reboot your computer in Safe Mode. On Windows 10 and 11, press Shift + Restart, then select Troubleshoot > Advanced options > Startup settings > Restart, and select the option for Safe Mode. On Windows 7 or 8, press F8 before Windows fully starts on reboot.
- Run another antivirus scan, as some trojans are stubborn and can only be removed in Safe Mode.
Get TotalAV to remove trojans from Windows
Remove Trojan virus from Mac computer
Mac software is generally better protected against trojan viruses and other malware, but it’s still possible to get a trojan when you’re using an Apple device. Here’s how to remove trojan viruses from a Mac computer:
- Download a reputable antivirus. TotalAV has proven 100% trojan removal success in my in-house tests and independent lab testing.
- Disconnect from the internet to block the trojan’s ability to siphon off data.
-
Start your antivirus and run a full scan. If a trojan is detected on your machine, it’ll be removed where possible.
- Otherwise, reboot your Mac in Safe Mode. Hold Shift after rebooting until you see the login screen, then release the key. You’ll see “Safe Boot” in the menu bar in red text if you were successful.
- Run another antivirus scan to remove any stubborn trojans that evaded the scan while you were logged in normally.
Get TotalAV antivirus to remove trojans on Mac
Remove Trojan virus from Android and iPhone
Android phones are fairly susceptible to trojans, particularly if you’re in the habit of downloading APK files, which are custom apps only available on the Android operating system. Conversely, iPhones enjoy better native protection due to Apple’s limits on what developers can do with the software. It’s very uncommon for trojans to make their way onto an iOS device, unless the device has been jailbroken.
Here’s how to remove a trojan virus from Android and iPhone devices.
On Android:
- Clear browser cache. Your cache holds a lot of temporary files that enable sites to load more quickly – but they can contain infected files, too. Go to Settings, then Apps, and find Google Chrome to clear the cache.
-
Delete suspicious apps. If you’ve recently installed apps before noticing suspicious behavior on your phone, remove them one by one. Ensure Google Play Protect is enabled in the Play Store, as it pre-scans apps before you install them.
-
Download an antivirus. TotalAV has a dedicated Android app that can scan for trojans and remove them from Android devices.
On iPhone
- Delete suspicious apps. On rare occasions, malicious apps have slipped by Apple’s security measures, so start by removing apps installed recently.
-
Perform a factory reset if needed. In Settings > General > Reset, you can reset your phone to its original settings, but bear in mind this means losing all data on the device unless you have created a backup.
- Restore from backup. After resetting your device, turn it back on and choose to Restore from iCloud Backup, then follow the instructions given.
For the best antivirus apps, check out the top options for iPhone and Android.
Best Trojan removers to protect your devices in 2025
To find the best trojan removers in 2025, I put 20 antivirus programs through rigorous testing with EICAR sample malware and trojan files. Below, you’ll find the top 3 trojan removers that were able to detect trojan virus infections and performed admirably during my in-house tests.
1. TotalAV - best Trojan virus scanner and remover in 2025
From $29.00/year
-
100% trojan detection and removal
-
Powerful real-time protection
-
Stops phishing threats
-
Free version more limited
TotalAV is the best antivirus for removing trojan viruses thanks to 100% real-time detection, confirmed through both independent lab tests and my own in-house testing. Even the free tier offers 100% malware detection, despite lacking real-time protection.
Test results: TotalAV performed extremely well in the most recent independent lab tests, scoring a 100% real-time protection rate. In my own in-house tests, these results were mirrored – TotalAV identified and blocked all 10 sample malware files from EICAR (European Institute for Computer Antivirus Research). Having already reviewed TotalAV at length, I expected a minimal impact on system resources. TotalAV didn’t exceed 2.5% CPU consumption, nor did it use excessive memory (RAM) during full scans.

Security features: TotalAV’s real-time protection is excellent at preventing malware before it can infect you by scanning files you download. A Web Shield feature also blocks any attempts to access malicious websites – I was routinely blocked when I tried to access free streaming sites due to the risks they pose. Additionally, TotalAV’s anti-phishing feature blocks malicious links embedded in phishing messages so that you can’t click on them by mistake.
Price: TotalAV’s most popular plan is its Premium plan, which includes full Trojan protection and other advanced features, costing around $39.99/year. A 7-day free trial is available, allowing you to test the software's Trojan removal capabilities. They also offer a 30-day money-back guarantee for full refunds if you're not satisfied.
2. Norton 360 - affordable antivirus to remove Trojan virus from your device
From $29.99/year
-
Includes a robust VPN
-
Intelligent trojan detection engine
-
Affordable 1-year plans
-
CPU spikes during full scans
Norton 360 is the best antivirus for trojan virus removal thanks to confirmed 100% malware detection, as well as anti-phishing and safe browsing tools for the web. While a little pricier than competitors, it’s a longstanding brand that offers robust antivirus security.
Test results: Norton 360 enjoys a 100% detection rate in the latest independent lab tests from AV-TEST, as well as in prior lab tests from earlier in the year. I also performed in-house tests with Norton 360 using sample malware and trojan files from EICAR, and the results were very positive. In all 10 instances, Norton 360 was able to identify the test malware file – it even blocked the download in some cases before it could make it onto my device. Running in the background, Norton only used around 100–200 MB of RAM and around 2-4% of CPU processing power. During a scan, these figures increased to around 250–500 MB of RAM and around 30-40% CPU power. In summary, Norton can be quite system-intensive during a full scan, but otherwise doesn’t consume too much system resource.

Security features: Norton 360 utilises advanced threat protection with machine learning and heuristics to identify trojans before they cause damage. You also get a firewall, a password manager, and a reliable VPN. Keeping the firewall active can help identify and block network threats, but using Norton’s VPN in conjunction with its antivirus for web access offers the best protection. The VPN performed well in our in-house tests, offering strong protection against malicious websites and malware-infected adverts.
Price: Norton's plans offer a lot of flexibility, with pricing ranging from $29.99 to $99.99. Trojan protection is included in the most basic plan – Norton Plus costs $29.99 for the year and protects one device. However, I recommend Norton Deluxe, which is $49.99 for the first year and protects 5 devices. You also get a VPN to help you avoid future malware infections. You can get a 14-day free trial to get started, and Norton has a lengthy 60-day money-back guarantee for new users too!
3. Surfshark Antivirus - well-rounded antivirus with 100% confirmed Trojan detection
From $50.85/year
-
100% trojan detection success
-
Malicious site and phishing protection
-
Lightweight on your system
-
VPN charged separately
Surfshark Antivirus is the best antivirus for removing trojans thanks to a 100% trojan detection rate and rapid scanning that completes quickly. A user-friendly interface makes it suitable for both antivirus newcomers and experienced users alike.
Test results: Surfshark Antivirus performed admirably in my in-house tests, easily detecting and removing sample EICAR Trojan viruses. Similarly, in AV-TEST’s most recent independent lab testing, Surfshark achieved a 100% detection rate. I liked the software’s rapid scan mode, which finished a full scan within minutes without impacting on my device’s performance. While Surfshark lacks advanced customization options like Norton, its user-friendly interface and strong detection results make it a robust antivirus for protecting yourself against and removing trojan viruses.

Security features: In addition to real-time protection and 100% trojan detection, Surfshark uses web filtering to block malicious websites and phishing threats. Scans can be launched ad hoc, but you can also schedule scans regularly to help keep a look out for suspicious app activity. A trojan-specific detection engine identifies behaviors and signatures associated with known Trojans while analyzing unusual behaviors to catch the latest threats.
Price: Surfshark Antivirus is very cheap at $19.99/year for trojan protection. However, I recommend trying the more advanced Surfshark One, which includes the powerful VPN service. In addition to robust trojan detection and removal, $2.69/month gets you full data encryption and web protection, including CleanWeb 2.0 which blocks malicious pop-ups. Unfortunately, Surfshark Antivirus lacks a dedicated free trial, but you can get a 7-day trial of Surfshark One on mobile devices. Plus, get a 30-day money-back guarantee to try it out for yourself.
Comparison of the best Trojan remover tools
Of the 20 antivirus programs I tested, TotalAV, Norton 360, and Surfshark Antivirus were the most successful at detecting and removing trojans. Below, I’ve compared their key features:
Trojan remover tools | Rating | Trojan detection | Max devices covered | Compatibility | Subscription price | Free version |
1. TotalAV | 9.7/10⭐⭐⭐⭐⭐ | 100% | 8 | Windows, macOS, Android | $1.58/month | ✅ Yes |
2. Norton 360 | 9.1/10⭐⭐⭐⭐⭐ | 100% | 10 | Windows, macOS, Android, iOS | $2.50/month | ✅ Yes, 14-day free trial |
3. Surfshark Antivirus | 8.8/10⭐⭐⭐⭐⭐ | 100% | 5 | Windows, macOS, Android, iOS | $4.24/month | ❌ No |
How does a Trojan virus work?
Trojan viruses trick you into downloading or running the program by hiding within or posing as a legitimate application. When you execute the file, it can perform a range of damaging tasks depending on the type of trojan your device has been infected with.
- Backdoor trojans create a remote access "door" on your device, allowing the attacker to access your system without your credentials.
- Remote access trojans (RAT) give the attacker a way to control your computer remotely, gathering data, taking screenshots, or installing additional malware.
- Exploit trojans target known software vulnerabilities, highlighting the importance of keeping all of your software apps updated with the latest security patches.
- Rootkit trojans embed themselves within the deepest layer of the operating system, making them difficult to detect and remove.
- Banker trojans specifically target your financial data, using fake sites to copy your banking login credentials, credit card numbers, and so on.
- DDoS trojans add your device to an infected botnet so that it can be used in DDoS attacks on other servers.
- Trojan downloaders are designed to download and install other kinds of malware onto your device.
- FakeAV trojans pose as legitimate antivirus software and prompt you to pay and upgrade to a non-existing premium version.
- Ransomware trojans encrypt your device data, locking access to them unless you pay the attackers.
- SMS trojans specifically target mobile devices and trigger automatic texts to premium-rate numbers owned by the attacker.
How did I get a Trojan virus on my device?
Since trojans are good at hiding themselves, it's easy to make a mistake and get infected with a trojan – especially if you lack an antivirus. However, in most cases a direct action that you’ve taken has likely resulted in your trojan infection.
- Email attachments: Trojans are commonly attached to emails, disguised as a PDF or Word document. However, once opened, the trojan is executed. Avoid downloading any attachments from unknown senders.
- Malicious websites: Simply visiting an infected site can pass the trojan to your device in some cases. In others, pop-up ads or browser vulnerabilities can result in a trojan being installed on your device. Web protection from a robust VPN can help.
- Torrenting websites: Trojans are frequently uploaded to torrent websites and other file-sharing sites by attackers. Protecting yourself with an antivirus and VPN that can pre-scan downloaded files is crucial.
- Hacked Wi-Fi: If you connect to an unsecured network, attackers can intercept your web traffic or introduce malware to your device. Ensure that you always use a VPN if you have to connect to public Wi-Fi networks.
- Spoofed chat messages: Trojans can be passed through social media platforms and messaging apps via messages. Social engineering attacks commonly use these methods to get you to click on a link and install a trojan.
- Malicious ads: Even if you're on a legitimate website, an infected pop-up ad can install a trojan on your device or redirect you to a malicious website that does the same. Ad blockers like Surfshark’s CleanWeb 2.0 can help protect you.
- Infected USB drives: Trojans can be preloaded onto an external storage device that activates when plugged into your device. I recommend scanning new files before opening them and never using a USB if you don’t know what it contains.
Having a robust trojan virus remover and VPN can guard you against every single one of these threats. I recommend using TotalAV in conjunction with TotalVPN. This double-layered protection will ensure that trojans don’t damage your device, even if you have a temporary lapse in judgement.
Get TotalAV + TotalVPN protection
What type of damage can a Trojan do to your system?
Because trojan viruses vary in what they're capable of, the damage they do to your system can be varied too. This can range from discreet background activity that steals data, to complete system lockdown. One of the most damaging effects is risk to your finances and credit. Trojans can steal banking credentials and credit card data, and in some cases they can even intercept your active banking sessions.
In terms of your device, a trojan can encrypt your files and lock you out of them completely unless you pay the attackers. They can also hand remote access to your device over to the attackers, allowing further malware to be installed and accounts remotely accessed. Aside from the immediate threats, trojans also slow down your device due to consuming system resources.
One of the more disturbing risks includes giving attackers remote access to your webcam and microphone, which can be used to spy on you. By recording your private moments or conversations, you might be subjected to blackmail by cybercriminals.
How to prevent Trojan malware?
To stop trojan malware from infecting your device in future, I recommend combining some practical tips with cybersecurity software protection:
- Don't download files from untrustworthy sources. Avoid clicking on links in emails, pop-up adverts, and text messages.
- Routinely update your OS and applications. Keeping apps and your operating system up to date ensures that attacks can’t target known vulnerabilities.
- Use ad blockers to stop malicious ads. TotalAV, Norton 360, and Surfshark Antivirus all offer ad-blocking software for an additional layer of protection.
- Use an antivirus with real-time protection. Antivirus software is the best way to prevent trojan malware through device and file scanning, and 24/7 protection.

Final thoughts
Trojan viruses can cause immense damage to your device, as well as financial loss and credit issues, but the good news is that the best anti-trojan tools can protect you. Combining antivirus software with a reliable VPN will give you the tools you need to avoid all potential avenues of trojan infection. After that, following simple tips like not clicking on malicious links or visiting malicious sites can help keep you safe – though your new antivirus and VPN will offer tools that even help to protect against human error.
TotalAV is the most-trusted antivirus for effectively removing trojan viruses in 2025, with 100% real-time detection, ad-blocking functionality, and protections against phishing attacks and malicious websites.
How do I know if I have a Trojan virus?
Signs of a trojan virus include slow device and app performance, suspicious apps running in the background, an increase in unwanted pop-ups, and a disabled antivirus. Use Task Manager on Windows or Activity Monitor on Mac to look for unknown apps. Otherwise, use a robust trojan virus scanner and removal tool. From in-house tests, TotalAV is the best antivirus to remove a trojan.
Should I worry about a Trojan virus?
Yes, you should be concerned about and take steps to prevent a trojan virus, as it can hijack your device, siphon off financial information, and give remote control to hackers. Trojans usually infect a device when a user accidentally downloads an infected but legitimate software app or is coaxed into clicking on a malicious link. That’s why it’s crucial to have robust antivirus and anti-trojan software.
Can a Trojan virus be removed?
Yes, a trojan virus can be removed with a robust antivirus program. After disconnecting from the internet, run an antivirus scan and remove any detected trojans in Safe Mode. Then, you can perform a system recovery from backup if needed. TotalAV performed best at removing trojans in our in-house tests.
How do I scan for a Trojan virus?
You can scan for a trojan virus using a reliable antivirus – my in-house tests revealed TotalAV, Norton 360, and Surfshark Antivirus to be the most effective at detecting trojans including Emotet and Zeus. These programs also include anti-phishing protection to help you avoid downloading a trojan by mistake in future.
What is the best tool to remove Trojans?
TotalAV is the best tool to remove trojans, determined through my in-house tests with 20 antivirus software programs. In addition to real-time protection and full system scans, you get phishing protection to protect you from phishing and social engineering attacks. Norton 360 and Surfshark Antivirus are also robust antivirus programs capable of detecting and removing trojans.
How much does it cost to remove a Trojan virus?
Removing a trojan virus with professional help usually costs around $100 to $150 or £50 to £100, depending on where you’re located. However, removing a trojan yourself with a robust antivirus can cost just $19 with TotalAV – the best antivirus to remove a trojan. This will also give you a year of protection to help avoid infections in future.
What is the best free Trojan remover?
TotalAV is the best free trojan remover, with real-time protection, a virus scanner, and trojan quarantine and removal tools. Bear in mind that the free version offers basic protection compared to TotalAV premium, which comes with added tools like phishing protection to stop you from accidentally downloading a trojan in the first place.
- How to remove a trojan virus
- What is a trojan virus
- Key indicators of a Trojan infection
- Remove Trojan virus from different devices
- Best antivirus for Trojan detection and removal
- Comparison of the best Trojan remover tools
- How does a Trojan virus work
- What damage can Trojans cause
- How to prevent Trojan malware
- Final thoughts