Checking a Windows PC for malware: a clear Windows Security workflow

A slow computer, a browser notification and a security alert are different observations. Start by recording what happened rather than installing every cleaner a search result recommends. This guide organizes Microsoft's own security instructions; it cannot determine from a distance whether a particular PC is infected.

First identify the device and security provider. On a personally managed supported Windows installation, open Windows Security and check the protection status and active provider. On a work or school device, follow the organization's process and contact its administrator. Do not change centrally managed security settings to follow a general article.

Use Microsoft's current Virus & threat protection guide for the available scan choices and interface on your device. Update protection information as directed before scanning. A quick scan, full scan and offline scan have different scopes; choose through the supported interface rather than an unfamiliar advertisement.

Microsoft explains that Defender Offline can restart the device and scan outside the usual Windows environment. Save work and follow the official preparation instructions before choosing a scan that restarts the computer. A restart is a consequence to plan for, not a sign that an unexpected pop-up's instructions are legitimate.

Hypothetical example. A browser tab displays a frightening warning asking for payment and a support phone call, while the security app shows no corresponding alert. Record the page and investigate the browser or notification source through trusted settings. Do not treat the tab itself as an authoritative diagnosis or follow its proposed remote-support route. The example describes a triage question; it is not a finding about your computer.

After a scan, record the result and the action the protection tool reports. If symptoms remain, keep the symptom and timeline separate from the scan outcome. A clean scan is useful evidence within its scope, but it does not certify that every account, browser extension or software component is safe.

Check the operating system's current support status through Microsoft, keep needed backups and seek appropriate help when the findings are unclear. Avoid disabling protection to force a tool to run. The practical aim is an evidence-based next step using the device's supported security process, not an endlessly repeated sequence of unrelated utilities.