Malware: How To Protect Against, Detect, and Remove It

What Is Malware?

Malware is harmful software that’s installed on your device without your knowledge. Viruses, spyware, and ransomware are common types of malware.

Criminals use malware to steal your personal information, like your usernames and passwords, bank account numbers, or Social Security number. If you think someone stole your information, visit IdentityTheft.gov to report it and get a personalized recovery plan with steps to take next.

Criminals may also install malware and use it to

• send you unwanted or inappropriate ads
• demand payment to unscramble data encrypted by ransomware
• make your device vulnerable to even more malware

Protect Against Malware

Use security software

To protect your computer from malware and other threats, use security software. Update it regularly, or set it to update automatically, for the most up to date protection. And set it to automatically scan new files on your device.

If you don’t have security software on your device, download it. Find recommendations from independent review sites by doing a search online. Also ask friends and family for recommendations.

Recognize common threats

Scammers send deceptive phishing emails that trick you into clicking on a link or opening an attachment that downloads malware. Don’t click on a link in an unexpected email. Instead, contact the company using a phone number or website you know is real.   

Scammers create fake security warnings that tell you to call a phone number for tech support. If you call, they ask for remote access to your computer, run a fake diagnostic test, then charge you to fix a problem that doesn’t exist. Never call a phone number that appears in a pop-up window.

Scammers place bogus ads for software on social media sites and on search engines. Don't click on ads to download software. If you see an ad for software that interests you, don’t click on it. Instead, go to the website by typing in the address.

Avoid risks

Avoid things that might expose you to malware.

• Don’t use unfamiliar websites to download free stuff like music, movies, shows, or games.
• Don’t download content through peer-to-peer (P2P) file-sharing sites.
• Use an antivirus or security program to scan USB thumb drives, external drives, and other external devices before using them.

Detect Malware

Even if you use security software, malware might go undetected, at least temporarily.  These symptoms could be a sign that your device is infected with malware.

1. Your computer slows down, freezes, or crashes.
2. Your browser’s home page changes or automatically redirects you to sites you didn’t intend to visit.
3. You notice new browser toolbars or add-on programs.
4. You get a lot of pop-up ads, including some inappropriate ads or ads on sites you wouldn’t expect, like on government websites.
5. You get repeated error messages from your operating system.
6. Your operating system tools, like Task Manager or Activity Monitor, are disabled.
7. You notice emails you didn’t write or social media messages you didn’t post.

Remove Malware

Here’s what do if you clicked a link or opened an attachment that you think may have downloaded malware onto your computer, or if you notice any of the signs above.

1. Immediately stop logging into online accounts with your usernames, passwords, or other sensitive information — like shopping or banking.
2. Update your security software to make sure you have the latest protections. If you don’t have security software, download it. Find recommendations from independent review sites and ask friends and family for recommendations.
3. Run a security scan to remove the malware.
4. Change your passwords and enable two-factor authentication in case the malware gave a hacker access to your accounts.

If you need help removing malware, you might

• contact the manufacturer of your device and find out if it’s covered by a warranty
• get tech support from a company you know and trust
• get help from a knowledgeable friend or family member

Report Scammers

If you see any ads, websites, or emails you think are trying to spread malware, or if someone installs ransomware and demands payment from you, report it to the FTC at ReportFraud.ftc.gov.