Windows security and backups, in plain English · Updated October 3, 2026
The fan is loud, the computer is slow, and a window suddenly appeared. Is that a virus? Those symptoms deserve a look, but they do not all point to the same cause.
Start with what you can observe. You want a useful next step, not a diagnosis based on how frightening a message looks.
The quick answer
A slow computer alone does not prove infection. Check where the warning came from, whether your security app reports a detection, and what changed recently. For confirmed threats or account misuse, respond to the specific evidence.
Watch: Slow PC? That doesn’t automatically mean a virus.
Common trouble that can look suspicious
Updates, a nearly full drive, too many startup apps, or a demanding task can make a computer slow. Browser extensions and notification permissions can also create unwanted interruptions.
Notice when the problem happens. Is it only one website? Only one app? Did it begin after installing something? Write that down before changing several settings at once.
Our slow computer guide is a useful starting point when performance is the only symptom.
Clues that need a closer check
- A detection in the genuine antivirus app.
- Unexpected software or a browser extension you cannot account for.
- Repeated redirects or settings changes after a new installation.
- Security protection unexpectedly disabled or unable to update.
- Files that suddenly will not open, especially alongside a ransom demand.
These clues vary in seriousness. An unfamiliar app name can belong to a legitimate component, so verify before deleting it. Microsoft explains the distinction between malware and potentially unwanted software.
A browser warning is a separate situation
A website can draw a convincing fake Windows alert, complete with a progress bar. That is not the same as a detection you opened inside Windows Security.
Do not call a number displayed in a frightening pop-up. Close the suspicious page and check your security app independently. Follow our fake virus warning guide if the page will not close normally.
Check safely and keep a record
- Note the exact symptom and when it started.
- Open the genuine security app and review protection status.
- If there is no sign of an active destructive incident, update protection and run a scan.
- Complete recommended actions and record the result.
- If trouble returns, get help with those details rather than trying random cleanup tools.
If files appear to be actively changing or a ransom note appears, disconnect networking and do not attach backup drives. For a managed device, contact its IT team promptly and follow its incident instructions.
Account trouble can happen without a PC infection
Unfamiliar sign-ins, unexpected password resets, or messages sent from your account may point to account compromise. They do not by themselves prove that this computer has malware.
Use another trusted device to reach the provider’s official recovery and security pages. Review recent activity, change exposed or reused passwords, and check recovery details. Do not use links from the suspicious message as your starting point.
When to stop experimenting
Get trusted technical help if detections keep returning, protection will not stay enabled, files are being encrypted, or someone had unauthorized remote access. Preserve messages and reports where you can do so safely.
A clean scan and a faster computer are helpful, but they do not settle every security question. The practical goal is to resolve the observed problem and know how to recover your important data.
Official references
Technical details checked against these sources on October 3, 2026. App labels and included features can change.