What’s the safest way to remove persistent malware from my laptop?

The missing audio and changed captions don’t necessarily prove that malware caused them; driver problems, browser settings, or an account preference could also explain those symptoms. Still, avoid backing up executable files or restoring the entire old system image. Copy only personal documents and photos after scanning them, and consider storing the backup offline until the laptop has been reinstalled and updated.

You can also run a full scan with Malwarebytes, ideally after disconnecting the laptop from the internet and using a trusted download. However, repeatedly allowing Defender to remove the same detection suggests that cleaning the current installation may not be enough. For a rootkit-level infection, a complete wipe and reinstall is generally safer than relying on another scan.

The most dependable solution for a suspected rootkit is a clean Windows reinstall from installation media. Create the installer using a known-clean computer, boot the laptop from the USB drive, delete every partition on the system drive during setup, and install Windows into the unallocated space. This removes the existing operating system and malware, but make sure important files are backed up carefully first because deleting the partitions erases the drive. Afterward, fully update Windows and reinstall programs only from their official sources.