How to Tell If Your Computer Has a Virus
Most of what people call “a virus” turns out to be one of about six different things, and only some of them are actually malware. Here’s how to tell which one you’re looking at, what’s safe to check yourself, and when to stop and call someone.
“I think I have a virus” is one of the most common calls we get, and it’s right maybe half the time. The other half is a computer that’s just old, an update that changed something, or a browser extension somebody installed months ago and forgot about. Neither answer is anything to be embarrassed about; the symptoms genuinely overlap. This is how to tell them apart.
The Real Symptoms of an Infection
These are the signs that actually point to malware, roughly in order of how confident you can be:
Your antivirus turned itself off
Legitimate security software doesn’t disable itself. If Windows Security or your antivirus shows as off and you didn’t turn it off, and it won’t turn back on, that’s a strong signal something is actively fighting it.
Files are locked with a ransom note
A text file demanding payment, or files that suddenly won’t open and have a new file extension, is ransomware. Stop using the computer and call. Don’t attempt to pay or negotiate yourself.
Programs you didn’t install
An unfamiliar toolbar, a new browser extension, or software in your Start menu that nobody in the house installed. Adware and bundled installers are the most common way this happens.
Searches or your homepage got hijacked
Typing a search and landing on an unfamiliar search engine, or a browser homepage that changed on its own, is a classic sign of adware or a hijacked browser extension.
Pop-ups outside the browser
Ads that appear even when no browser is open are a different animal than ads on a website; they mean something is installed and running, not just a bad web page.
Contacts are getting messages from “you”
Friends or coworkers reporting spam or strange links from your email or social account, that you didn’t send, usually means an account was compromised rather than the computer itself, but it’s worth ruling out both.
Things That Get Blamed on Viruses but Usually Aren’t
These are the calls that start with “I think I have a virus” and end with something else entirely:
| What you’re seeing | What it usually actually is |
|---|---|
| Computer has gotten slower over months or years | Accumulated startup programs, updates and a near-full drive. See our Windows 11 slow guide. |
| Fan is loud, computer runs hot | Dust buildup or a thermal issue, especially common in Florida’s heat and humidity. |
| Laptop battery drains fast | An aging battery. Batteries degrade with age and charge cycles regardless of malware. |
| Browser looks different after an update | Browsers change their own layout and default settings during routine updates. |
| A website itself is full of ads or looks sketchy | That’s the website, not your computer. Closing the tab is the fix. |
| Windows is asking to update or restart | Normal patching behavior, not a sign of infection. |
Quick Checks You Can Safely Do Yourself
None of these can hurt anything, and they’ll tell you a lot before you call anyone:
- Open Task Manager (Ctrl+Shift+Esc) and sort by CPU or Disk. An unfamiliar process name pinned near the top, especially with a random-looking name, is worth noting down.
- Check your installed programs list (Settings > Apps) for anything you don’t recognize, sorted by install date if you can, to catch anything that showed up recently.
- Check your browser’s extensions list for anything you didn’t knowingly add.
- Run a full scan with whatever antivirus is already installed, even if it’s just Windows Security. It’s not a perfect test, but a real detection is a real detection.
What Not to Do
- Don’t call a phone number from a pop-up. See our fake virus popup guide if that’s what you’re looking at right now.
- Don’t download a random “cleaner” or “optimizer” tool you found by searching your symptom. Several of the top search results for “remove virus” are themselves adware.
- Don’t reinstall Windows as a first move. It’s a real fix for some problems, but it also erases the evidence of what was actually wrong, and your files, if you haven’t backed them up first.
- Don’t pay a ransom note. There’s no guarantee of getting files back, and it funds the next attack.
When to Stop and Call Someone
Call sooner rather than later if: your antivirus is disabled and won’t turn back on, you’ve found a ransom note, you handle sensitive data (banking, business files, client records) on the machine, or you’ve already tried a scan and the symptoms are still there. The longer an infection sits, especially one that’s disabling your security software on purpose, the more it can spread to other devices on the same network.
Think You've Got Something?
Our Certified Malware Removal Experts can usually clean an infection without wiping your files or reinstalling Windows. Call, and we'll walk through what you're seeing before anything gets scheduled.
More Guides
Run it: separate profiles for copper and fiber, plus latency under load.
What download, upload, latency, jitter and bufferbloat each actually tell you.
The issues we see most often in Tampa Bay homes, and what to try first.
Why the mesh kit didn't fix it, what's really blocking the signal, and the fix that holds.
Which cable fixes are cosmetic and which ones are bend radius, EMI or fire-safety issues.
UPS topology, waveform and sizing math, explained without the marketing numbers.
What to stop doing, and do next, when a drive starts clicking or won't mount.
How to know which type of service gets you fixed faster.
What proactive support actually saves you compared to calling only when something breaks.
How a monthly maintenance plan pays for itself in prevented downtime.
The proactive steps that keep your business off the list of ransomware victims.
How to tell when antivirus alone isn't covering you anymore.
What managed detection & response catches that antivirus can't.
Why a stolen password is now the most common way in, and how it's stopped.
What HIPAA, PCI DSS and NIST reporting should actually look like.
A quick check on whether your current IT setup is costing more than it should.
What actually happens during a remote session, step by step.
The three layers of cyber threats, and which one actually hits home users and small businesses.
California's DROP tool plus the DIY opt-out list for every other state, and when it's worth letting us drive.
Real, upfront rates for computer repair and managed IT services: no hidden fees.
Startup bloat, a near-full drive, an aging HDD, or something else entirely: how to find the real cause of a...
A straight decision framework: when a repair clearly wins, when replacement clearly wins, and the hidden...
An external drive on your desk is not a backup strategy. The 3-2-1 rule explained, what ransomware changes...
Straightforward hourly rates, what typical jobs actually run, and what makes a repair cost more or less. Real...
That full-screen warning with a phone number is not from Microsoft. Here's how to close it safely, without...
📞 727-579-4335 · ✉️ support@baygeeks.com · Privacy Policy · Terms of Service