What to Do If You Have a Computer Virus

Immediate Steps When You Suspect a Virus

If you suspect your computer has a virus, disconnect it from the internet and any network immediately. This prevents the malware from spreading to other devices, stealing sensitive data in real time, or communicating with a command-and-control server. Do not ignore the warning signs, such as slow performance, pop-ups, or unfamiliar programs launching at startup.

Back Up Critical Files Safely

Before attempting any removal, back up essential documents, photos, and projects to an external drive or a cloud service. Scan the backup with antivirus software afterward to ensure you are not copying the infection along with your files. Avoid backing up executable files or system folders, as these can harbor malware.

Run a Full System Scan

Boot into Safe Mode to prevent the virus from actively running, then perform a full system scan using a trusted antivirus or anti-malware tool. If your current antivirus is compromised, use a rescue disk or a second-opinion scanner such as Malwarebytes or a similar reputable utility. Quarantine or delete anything the software flags as malicious.

Remove Persistent or Sophisticated Malware

Some infections, like rootkits or bootkit viruses, resist standard scans. In these cases, use a dedicated removal tool provided by the antivirus vendor, or consider resetting the operating system to factory settings after confirming your backups are clean. A complete wipe and reinstall is the most definitive way to clear deep-seated malware.

Strengthen Your Defenses After Removal

Once the virus is gone, update your operating system and all installed software, change passwords for important accounts from a clean device, and enable real-time protection. Review browser extensions, remove anything unfamiliar, and turn on automatic updates to close the vulnerabilities the virus likely exploited.