Does Your Computer Have Malware? 8 Signs — and the Scan Order That Actually Helps

A slow computer is not automatically infected. Neither is a hot fan, one browser crash or a battery that is getting old.

Malware becomes more plausible when unusual behavior appears suddenly, several symptoms occur together, or security tools report a threat.

THE EIGHT SIGNS

Clues worth investigating

01

The computer suddenly becomes much slower

Microsoft lists an unexpected performance drop as a possible malware clue, especially when no normal workload explains it.

02

Battery life falls sharply

An unknown process consuming CPU, network or GPU resources can increase power use.

03

Data usage rises unexpectedly

Background malware can communicate with external systems.

04

Pop-ups appear outside normal website behavior

Unexpected ads or persistent prompts can indicate unwanted software or browser compromise.

05

The browser redirects you to unrelated sites

Microsoft specifically lists unexpected redirects as a malware clue.

06

Security settings change without you

Disabled antivirus, new exclusions or unfamiliar browser extensions deserve immediate attention.

07

Unknown programs or startup items appear

Potentially unwanted apps may install alongside other software.

08

Files become encrypted or a ransom message appears

That is a ransomware incident, not a vague symptom.

THE SCAN ORDER

Use the tools already in Windows

1 · QUICK SCAN

Start with Windows Security

Useful for common active threats.

2 · FULL SCAN

Go deeper when symptoms persist

Microsoft says a full scan checks every file and program on the device.

3 · OFFLINE SCAN

For persistent or hard-to-remove threats

Microsoft Defender Offline restarts into a separate environment, making it harder for persistent malware to hide.

4 · HISTORY

Review what Defender found

Protection History shows detections and actions.

IF YOU SEE A REAL COMPROMISE

Reduce the blast radius

01

Save evidence before randomly deleting everything

Screenshots of warnings and filenames can help support or IT teams.

02

Disconnect from networks when active theft or ransomware is suspected

Especially when the machine may be spreading or sending data.

03

Change important passwords from a clean device

Do this if credentials may have been exposed.

04

Do not pay ransomware automatically

Microsoft notes that paying does not guarantee file recovery.

05

Restore from known-good backups only after cleaning

Otherwise the infection can come back with the data.

HOW MOST PEOPLE GET INFECTED

Ordinary actions, not movie hacking

Microsoft highlights malicious attachments and links, unsafe or fake sites, bundled software, unknown USB devices and unpatched vulnerabilities as common routes. The practical defenses remain updates, real-time protection, reputable downloads, backups and skepticism toward unexpected files.

INCIDENT FLOW

Symptoms suggest; scans confirm

Do not diagnose malware from one slow afternoon.

Run the security tools, look for clusters of abnormal behavior and escalate to an offline scan or professional support when the problem persists.

Security note

Windows steps follow current Microsoft Support guidance. Enterprise-managed devices should follow the organization’s incident-response process.