The short answer

A slow computer alone does not prove malware. Unexpected security-setting changes, unfamiliar programs, repeated redirects, or a real antivirus detection deserve investigation. Open security software yourself, update it, and scan rather than trusting a warning displayed by a website.

Before you begin

If files are being encrypted, accounts are being used without permission, or someone is remotely controlling the computer, disconnect it from the network. Use a different trusted device for account recovery. Do not attach your backup drive to a suspected infected computer.

First identify where the warning comes from

A warning inside a browser tab can imitate Windows, play an alarm, and display a phone number without having scanned the computer. It is not proof that the device is infected. Close the tab without clicking its buttons. If it refuses to close, use Task Manager to end the browser; unsaved work in that browser may be lost. Avoid reopening the same tabs at the next launch.

By contrast, a detection you can find by opening Windows Security yourself is something to review. Record the threat name, affected file, and action taken. Do not restore a quarantined file simply because an unfamiliar website tells you it is safe.

Look for a pattern, not one symptom

Potential warning signs include a browser homepage or search engine changing repeatedly, extensions you did not install, a security tool being disabled unexpectedly, and unfamiliar programs that return after removal. Messages sent from your account without your knowledge may indicate an account compromise even when the computer is clean.

Crashes, fan noise, slow startup, and high memory usage also have ordinary explanations, including updates, a full drive, aging hardware, and too many open programs. Note when the problem started and whether it followed a download, extension installation, suspicious attachment, or remote-support session. That timeline is more useful than guessing from speed alone.

Run a legitimate Windows security check

These steps apply to a personal Windows PC. A managed work or school computer should be reported to its IT team instead of changing its protection settings. If a third-party antivirus manages the device, use its official instructions; avoid running several real-time antivirus products together.

  1. Open Start, type Windows Security, and open the app. Select Virus & threat protection. Review whether a protection provider is active.
  2. Get available security-intelligence updates, then run a Quick scan. Read the result and any recommended action.
  3. If concerns remain, open Scan options and run a Full scan. Keep the computer connected to power and allow time for the scan.
  4. If persistent malware is suspected, save work and consider Microsoft Defender Offline from Scan options. This restarts the PC. Afterward, review Protection history.
  5. Install supported operating-system and browser updates. Review recently installed apps and browser extensions, removing only entries you can identify as unwanted.

Respond to the actual exposure

If you typed a password into a fake website, change that password from a trusted device and change it anywhere else it was reused. Review account recovery details, active sessions, and multifactor authentication. A clean scan does not reverse a stolen password or an already authorized transaction.

If a scan removes a threat, restart when instructed and scan again. Seek trusted professional help if protection will not stay enabled, detections return, sensitive information may have been exposed, or the computer remains under someone else’s control. Ask the repair provider to explain data preservation before reinstalling or resetting Windows.

Reduce repeat problems

Download apps from their official publisher or a trusted app store. Keep backups separate from the working computer, and maintain supported software. Avoid registry cleaners, mystery driver bundles, and products promising an instant cure for every slowdown.

No scan can guarantee that a computer has never been compromised. For a serious incident, recovery may require a clean installation and carefully reviewed file restoration. Preserve recovery keys and verified backups before destructive recovery steps.

Sources and further help

Official documentation used to check the guidance. Menu names and options can vary by device and software version.

Spot an error or an outdated step? Tell the editor. Please never send passwords or private files.