Main navigation
-
Advice & guidance
Our advice & guidance covers a broad range of topics
Find information for...
Popular topics
Other resources
-
Respond to a cyber attack
Resources for individuals and organisations in the UK who have experienced an online scam or cyber attack.
Find advice for...
Respond to...
-
Find a product or service
Find a range of products & services from NCSC and certified 3rd party suppliers
In this section
Useful links
-
Education & skills
Working with industry, government and academia to support the next generation of researchers, students and cyber security professionals
Find information for...
Education & academia resources
Industry & skill resources
-
News
All the latest information to help you keep track of what's happening
In this section
Stay up to date
Respond to a cyber attack
Infected devices

What action should I take?
If you think you may have malware on your device, you should:
- You may already know for sure because your antivirus product is telling you it has found an infection.
- If you suspect an infection but aren't sure, the easiest way to confirm an infection on a PC or laptop is to run an antivirus scan and see if it detects anything.
- If you don't have antivirus, signs of infection include:
- Your device is running slowly, rebooting by itself, frequently closing programs or apps you are using, or opening those you are not.
- You have pop-up boxes from programs or apps that you don't recognise, asking you to do unexpected things.
- Someone you know has received unexpected emails from you, advertising unlikely products, or perhaps asking for money
On a phone or tablet
- Antivirus products don't work in the same way as PCs and laptops. The safest solution is to do a factory reset – you can usually find this option in 'settings'.
- If this doesn't fix the problem, you'll need expert help.
On a PC or laptop
- Update your device and programs.
- Open your antivirus product and run a scan, then take the actions it recommends.
- If your antivirus can’t clean up your device, you’ll have to wipe it entirely and reinstall everything, starting with your operating system. You may need expert help to do this.
- If you can't download and install an antivirus product because your web browser (such as Chrome, Edge, Firefox) is infected, you will probably need to get expert help.
Restore your backed-up data from the 'last known' good backup. You will lose any data that wasn't backed up, but trying to rescue data while your device is still infected runs the risk of carrying the infection through after wiping and reinstalling.
- Follow our advice for setting up your devices securely and keeping them safe
- Keep your device and programs and apps up to date
- Back up your data
- Check your device is encrypted
- For PCs and laptops, make sure you have antivirus and that you install security updates as soon as they are available, ideally by setting them to install automatically
Further resources
For more information about how to prevent attacks like this in future, there is NCSC guidance to help you:



