If your computer suddenly slows down, pop-ups keep appearing, or your phone gets hot, drains battery, and shows strange ads, do not just wait it out. The safest order for how to get rid of viruses is usually: stop risky activity first, scan and isolate the problem, then recover or reinstall only if needed.［1］［2］［3］

Slow performance, heat, and battery drain do not always mean a virus. Microsoft also notes that similar symptoms can come from malware, software issues, or hardware problems.［1］ This guide starts with warning signs, then walks through cleanup by device type.

Use the digital privacy guide as the wider checklist: it connects this issue to accounts, devices, identifiers, and data-broker exposure.

What signs suggest your device may be infected?

One symptom alone is not proof of malware. Several together deserve attention:

The system becomes very slow, freezes, or crashes;
Pop-ups and ads suddenly increase;
Apps, extensions, or shortcuts appear that you did not install;
Security software, updates, or task-management tools stop working;
A phone overheats, drains battery, or uses unusual mobile data;
The browser homepage, default search engine, or proxy settings change.［1］［3］

For desktop symptoms, also check is my computer hacked?.

What should you do first?

1. Stop sensitive activity

Do not keep signing in to email, online banking, work dashboards, or trading accounts.

2. Disconnect unnecessary network access

If you suspect remote control, data theft, or malicious downloads, narrow the exposure first.

3. Write down what changed

Note when the problem started, what you installed, what links you clicked, and which attachments you opened.

What to do if a Windows PC has a virus

Microsoft’s guidance centers on updating Windows and using official or trusted security tools to scan and remove malware.［1］［2］

Step 1. Update Windows and security definitions

If updates still work, install them first.

Step 2. Run a security scan

Microsoft provides tools such as MSRT for post-infection cleanup, while making clear that they do not replace always-on antivirus protection.［2］

Step 3. Review unknown programs and browser extensions

Many “virus-like” problems are actually adware, unwanted software, or malicious extensions.

Step 4. If security tools are disabled, use offline or deep scanning

If you cannot open security sites or antivirus keeps shutting down, treat the risk as higher.［1］

What if a Mac is infected?

Apple’s Mac malware guidance points to unknown downloads, email attachments, and web prompts as common entry points.［3］

Delete recently downloaded suspicious files or apps

Start with installers, cracked tools, and files pushed by browser pop-ups.

Check login items and browser extensions

Malware often hides in startup items or extensions instead of announcing itself.

Restore or reinstall when needed

If redirects and ads keep returning, or you cannot tell what settings changed, recovery may be safer than piecemeal fixes.

What to do if an Android phone has a virus

Google Play Protect is Android’s built-in defense. It scans apps, warns about harmful ones, and may disable or remove risky apps in some cases.［4］

1. Run Play Protect

Make sure it is enabled. Google recommends keeping it on.［4］

2. Uninstall recently installed suspicious apps

Focus on third-party installs, apps with excessive permissions, and apps that look like system components but have unclear origins.

3. Check accessibility, device admin, and high-risk permissions

Many financial scam apps use these permissions to gain more control.

4. If the problem remains, consider a factory reset

Back up only the data you truly need. Do not restore suspicious installers.

What about iPhone or iPad?

iPhone and iPad malware paths differ from traditional computers, but risk still exists. Apple says that if iOS or iPadOS detects a third-party app containing malware, it blocks the app and recommends deletion.［5］

Delete suspicious apps first

If the system shows a malware warning, follow Apple’s deletion guidance.［5］

Check for unknown profiles, configuration files, or enterprise-signed apps

These routes matter more than the classic idea of a “virus.”

If a webpage says “your iPhone has a virus”

Do not download a cleanup app from that page. Many of these alerts are web scams, not proof of system infection.

What recovery steps come after removal?

Change passwords

Start with email, payment, social, and work accounts.

Enable or reset two-factor authentication

Do not leave accounts exposed after the device is clean.

Check for data exposure

If you logged in during the suspicious period, read what to do after a data breach.

Find the entry point

Was it an attachment, fake update, browser pop-up, or third-party app? Without finding the entry point, repeat infection is more likely.

How can you reduce the chance of infection?

Download apps and updates only from official sources

Do not casually open email attachments or text-message links

Keep browser extensions to a minimum

Keep systems and security features updated

Avoid using sensitive accounts unprotected on public networks

If you often work from cafes, hotels, or airports, also read should you use a VPN on public Wi-Fi? and how to spot phishing attacks.

Summary

A slow or hot device is not always infected, but uncertainty is not a reason to ignore it.
Use this order: stop sensitive activity -> scan/isolate -> remove suspicious items -> recover if needed.
Different systems need different cleanup methods. Do not apply Windows advice blindly to phones.
After removal, review passwords and two-factor authentication.

FAQ

Does a slow device always mean it has a virus?

No. Microsoft notes that similar symptoms can also come from hardware or software issues.［1］

Are phones less likely to get viruses than computers?

Not necessarily. Android and iPhone/iPad have different risk paths, but both can face malicious apps, phishing, and scam pages.［4］［5］

Can Windows MSRT replace antivirus?

No. Microsoft says MSRT-style tools are not always-on protection.［2］

Is every “virus detected” iPhone pop-up real?

No. Many are web scams. A real system-level malware warning is clearer and has a specific deletion flow.［5］

Is a factory reset the safest fix?

When problems repeat, the source is unknown, or you cannot tell what changed, a reset can be one of the cleanest fixes. Back up safely first.

Should I change passwords after removing malware?

Yes, especially for email, payment, work, and social accounts. A clean device does not prove your accounts were untouched.

Disclaimer

This article is for general security education only and does not constitute professional forensics, enterprise endpoint response, or repair advice. For company devices, contact your IT or security team first.

AethoVPN publishes this guide, but a VPN connection cannot resolve the issue discussed here: how to get rid of viruses.

Sources

Microsoft Support, Microsoft resources and guidance for removal of malware and viruses: https://support.microsoft.com/en-us/topic/microsoft-resources-and-guidance-for-removal-of-malware-and-viruses-424a7d42-df47-4f9d-a98e-39082a5e9427
Microsoft Support, Remove specific prevalent malware with Windows Malicious Software Removal Tool (KB890830): https://support.microsoft.com/en-gb/topic/remove-specific-prevalent-malware-with-windows-malicious-software-removal-tool-kb890830-ba51b71f-39cd-cdec-73eb-61979b0661e0
Apple Support, What is malware on Mac?: https://support.apple.com/guide/mac-help/mh27449/mac
Android Help, Use Google Play Protect to help keep your apps safe and your data private: https://support.google.com/android/answer/2812853?hl=en
Apple Support, If your iPhone or iPad warns you that a third-party app contains malware and cannot be opened: https://support.apple.com/en-mide/116947

Sources checked 8 May 2026.

Related Articles: