What to Do When Your Computer Has a Virus

Disconnect from the internet when risk is active

If you see unauthorized remote control, ransomware, suspicious transfers or continuous malicious pop-ups, disconnect Wi-Fi or the network cable to limit communication.

Do not enter more passwords

Use a separate, trusted device to change important passwords, beginning with email and financial accounts. Enable multi-factor authentication where available.

Record the symptoms

Take photos of messages and note when the issue began, what was installed and which accounts showed unusual activity. This information can help diagnosis.

Avoid untrusted cleanup downloads

Malicious advertisements often promote fake antivirus tools. Only use reputable software from verified sources, or have the system assessed professionally.

Back up carefully

Documents and photos may be copied when safe, but do not blindly copy suspicious programs or encrypted files. Scan recovered data before restoring it to a clean computer.

Complete cleanup and security hardening

Effective remediation may involve malware scans, browser cleanup, startup review, operating-system repair, password changes, updates and—in serious cases—a clean reinstallation.

Frequently Asked Questions