Suspicious pop-ups, redirects, unexpected browser changes, slow performance, unusual battery or data use, and unexplained account activity can be reasons to investigate—but none proves malware by itself. Start with the device maker’s trusted security tools or the exact warning shown by its operating system. Never call a number, pay, or download a “cleaner” from an unsolicited web-page warning.
How to tell whether a device may have malware
Common clues include repeated pop-ups, redirects to unfamiliar sites, a changed browser homepage or search engine, unexpected slowdowns, unusually high battery or data use, or account messages you did not trigger. These symptoms can also have other causes, so treat them as a prompt to check rather than a diagnosis. Microsoft notes that computer problems resembling malware symptoms may have non-malware causes.
If the device appears to be sending messages or performing other suspicious actions, avoid using it for sensitive sign-ins until you have run a trusted scan and checked the affected accounts. Do not follow instructions in an unexpected pop-up; open the device’s built-in security settings or the official support page yourself.
Choose the cleanup method for your device
| Device | Trusted first step | When to escalate |
|---|---|---|
| Windows PC | Run a Microsoft Defender scan; use Defender Offline for a more thorough scan option. | If threats or symptoms persist, follow Defender’s removal prompts, update security intelligence, run a full scan, and consider Microsoft’s unwanted-software guidance. |
| Android phone or tablet | Enable Google Play Protect, check system updates, and uninstall untrusted or unfamiliar apps. | If warning signs remain after these steps, Google advises considering a reset or contacting the device maker. |
| iPhone or iPad | If Apple specifically alerts that an app contains malware and cannot be opened, delete that app. | Apple’s cited guidance addresses that alert scenario; it is not a general diagnostic procedure for every suspected iPhone or iPad infection. |
| Mac | If macOS reports that a downloaded item is malware, put the item in Trash and empty Trash. | For further support, follow Apple’s guidance for the flagged item and consult Apple support. |
Remove malware on a Windows PC
- Open Windows Security, choose Virus & threat protection, and start a scan. Microsoft’s guidance describes a quick scan and additional scan options. See Microsoft’s Defender scan instructions for the current interface.
- If the scan detects a threat, use the offered quarantine or removal action. Defender may block and try to remove malware, but Microsoft says some cases require the user to quarantine or remove a file or process.
- If the problem continues, update Defender security intelligence, uninstall software you do not need or trust, and run a full scan. Microsoft identifies Microsoft Defender Offline as its most complete scan option; it can be selected from scan options in Windows Security.
- Do not run two real-time antivirus products simultaneously. Microsoft warns that multiple security programs can reduce performance or destabilize a PC. If you remove an unwanted security product, leave protection enabled with a trusted alternative.
Microsoft’s guidance is available at Protect my PC from viruses.
#1 Best Overall
Remove suspicious apps on Android
- Open the Google Play Store, tap your profile icon, choose Play Protect, and check that app scanning is enabled. If you have installed apps from outside Google Play, turn on harmful-app detection as well. Labels and menu locations may differ by Android version and manufacturer.
- Install available Android, security, and Google Play system updates through your device’s Settings.
- Uninstall apps you do not recognize or trust, especially apps installed shortly before the symptoms began.
- Review your Google Account’s Security Checkup. Google’s Android guidance covers these steps and recommends considering a device reset or manufacturer help if signs continue: Remove malware or unsafe software.
Follow Apple’s specific malware warnings
iPhone or iPad
If iOS or iPadOS displays Apple’s alert that a third-party app contains malware and cannot be opened, delete the app from the alert or remove it from the Home Screen or App Library. Apple warns that re-enabling the app could harm the device or compromise privacy. This instruction applies to that specific alert, not to every unexplained device symptom. See Apple’s guidance for an app that contains malware.
Mac
If macOS says a downloaded item is malware, Apple recommends putting that item in Trash and emptying Trash. Do not open downloads from sources you cannot verify. Apple’s instructions are at Protect your Mac from malware.
Rank #2
Finish cleanup and protect your accounts
- Install available operating-system security updates.
- Remove browser extensions you do not trust. If unwanted browser changes remain, restore the browser’s settings using its own settings menu. Google includes extension removal and browser-setting restoration in its computer cleanup guidance: Remove malware or unsafe software.
- Review the security page for the accounts that may have been exposed. If you suspect a password was captured, change it from a device you believe is clean, and enable multi-factor authentication where available.
- If symptoms continue after the documented steps, consult the device maker’s support guidance or consider a factory reset. Back up important personal files, but do not restore suspicious apps or executable files from a backup. Google identifies reset or manufacturer help as possible next steps when its Android cleanup advice does not resolve the signs.
When a scan or deletion is not enough
There is no single cleanup procedure that applies to every device or warning. Windows offers standard and offline Defender scans; Android’s guidance centers on Play Protect, updates, and app removal; Apple’s iPhone and iPad instructions apply to a particular malware alert; and its Mac instructions cover a downloaded item flagged by macOS. If the warning returns or suspicious activity continues after the relevant cleanup, do not assume the device is clean merely because one scan found nothing. Use the platform maker’s support route for the device and alert you actually have.
Quick Recap
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

