Get Help

I Downloaded a Suspicious File — What Should I Do?

Your computer is behaving unusually — it's slow, showing pop-ups, opening programs on its own, or your antivirus has flagged something. This may indicate malware, but some of these symptoms also have simple, non-malicious causes.

What to do now

If you downloaded or opened a suspicious file, stop interacting with it, run a security scan, update the device and watch for unusual behaviour. Get help if the device continues behaving strangely.

Do this now

Disconnect from the internet if you suspect active malware, to limit further data being sent out.
Run a full scan with your device's built-in or installed security software.
If financial or password-manager apps are installed, treat those passwords as potentially exposed.

Then do this

Update your operating system and all applications once the scan is clear.
Change passwords for sensitive accounts from a different, trusted device.
Consider a clean reinstall of the operating system if problems persist after removal.

Check these things

Are there unfamiliar programs in your list of installed applications?
Is your antivirus/security software up to date and actually running?
Did the symptoms start after installing something from an untrusted source?

Don't do this

Don't download a random 'fix-it' tool from a pop-up or search ad.
Don't enter banking passwords on the infected device until it's confirmed clean.

When should I get help?

Consult an IT professional if you're not confident removing the infection yourself.
Contact your bank if financial details may have been exposed.

Related help

Your situation may involve more than one issue. These related guides can help you work through the next step.

I Entered My Password on a Suspicious Website — What Now?If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.Someone Has My Personal Information — What Should I Do?If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.

Loading Cyber Conduct…

Please wait while the page loads.