Your computer or phone is acting weird โ it's slow, crashing, opening pages you didn't navigate to, or showing ads you can't explain. You might have malware. Here's how to check and remove it.
Signs You Might Have Malware
- Browser opens to unfamiliar pages or has toolbars you didn't install
- Computer is significantly slower than normal
- Battery drains faster (malware runs in the background)
- You're redirected from websites you try to visit
- Social media friends receive messages you didn't send
- Antivirus is disabled or won't update
- Large, unexplained network activity when idle
- Files are encrypted or you can't access your own files
Removing Malware from Windows
Step 1: Disconnect from the Internet
This prevents the malware from communicating with its command server and stops data exfiltration. Pull the ethernet cable or turn off WiFi.
Step 2: Boot into Safe Mode
Safe Mode loads Windows with minimal drivers and programs, which prevents most malware from running. On Windows 10/11:
- Click Start โ Power button
- Hold Shift and click Restart
- Go to Troubleshoot โ Advanced Options โ Startup Settings โ Restart
- After restart, press F4 or 4 for Safe Mode
Step 3: Run Microsoft Safety Scanner
Before anything else, download and run Microsoft Safety Scanner (available free at aka.ms/mst). It doesn't conflict with your existing antivirus and runs a deep scan. Also try Malwarebytes Free (malwarebytes.com) โ it's particularly effective against PUPS (potentially unwanted programs) that regular antivirus often ignores.
Step 4: Check Startup Programs
Press Ctrl+Shift+Esc to open Task Manager, go to the Startup tab. Disable anything you don't recognize or that has a suspicious publisher. Be careful โ disabling the wrong thing can break legitimate software, so research unknown entries before disabling.
Step 5: Check Browser Extensions
Most malware that affects browsing comes as a browser extension. In Chrome: go to chrome://extensions/. In Edge: edge://extensions/. Remove anything you didn't deliberately install or that looks suspicious.
Step 6: Clear Browser Data
Go to your browser's settings and clear all cookies, cache, and site data. This removes persistent malware stored in browser storage.
Removing Malware from Mac
Macs are not immune โ malware targeting macOS has increased dramatically. The process is similar:
- Disconnect from the internet
- Check Activity Monitor for suspicious processes consuming high CPU or memory
- Check Login Items (System Settings โ Users & Groups โ Login Items) for things you didn't add
- Check Safari/Chrome extensions for unknowns
- Run a malware scan โ Malwarebytes for Mac has a solid free version
- Clear browser data and reset browsers to default if needed
Mobile Malware (Android and iOS)
iOS
iOS malware is rare due to Apple's strict App Store review and sandboxing. If you're not jailbroken and only install from the App Store, you're quite safe. If you see weird behavior: check Settings โ Screen Time โ See All Apps for any unknown apps, and restart your phone.
Android
Android is more open and thus more targeted. If you suspect malware:
- Boot into Safe Mode (hold power button, long-press Power Off, select Safe Mode)
- In Safe Mode, go to Settings โ Apps and look for anything you didn't install
- Uninstall suspicious apps
- Check Settings โ Security โ Device Administrators for any suspicious entries and remove them
- Run Google Play Protect (usually built into the Play Store)
If You're Hit with Ransomware
Don't pay. Instead:
- Check No More Ransom Project (nomoreransom.org) โ they have free decryption tools for many ransomware variants
- If you have clean backups, wipe the device and restore
- As a last resort, consider professional data recovery services โ expensive but sometimes the only option for critical files
The best defense against malware is still proactive: keep software updated, don't install from unknown sources, don't click suspicious links, and maintain good backups. Prevention is always easier than cure.