I clicked a URL that appeared legitimate, but I'm now worried it installed spyware. My computer is showing several unfamiliar processes that I can't remove, and memory usage is around 14 GB even when I only have a browser open. The problem may have started on my phone while it was connected to the computer, so I'm concerned both devices could be affected. I suspect files and login information may already have been copied. What is the safest way to protect my accounts, back up important files, and then wipe and reinstall the operating system? I'm also worried that the hardware itself may have been damaged.
3 Answers
Use a known-clean device, such as a fully updated phone or another computer, to change important passwords and enable two-factor authentication. Prioritize email, banking, password-manager, and cloud-storage accounts. You generally do not need to delete the accounts themselves; secure them, revoke unknown sessions and connected apps, and then reinstall Windows on the computer.
The hardware is probably not damaged. Malware can consume memory and alter the operating system, but a clean operating-system installation normally removes software-based infections. Disconnect the computer from the internet, back up only essential personal files, wipe the system drive, and install a fresh copy of the operating system. Change passwords from a device you trust rather than from the possibly infected computer.
How can I be sure the hardware is safe? The issue may have started on my phone while it was plugged into the computer, and I didn’t notice at the time.
First unplug Ethernet and disconnect Wi-Fi. You can run an antivirus scan, but if you already believe the system is compromised, treat scan results as incomplete and don’t rely on them as proof that it is clean. Copy only irreplaceable photos and documents to an external drive, avoid copying programs or unknown files, then perform a full wipe and fresh installation. Afterward, update the system, reinstall applications from official sources, and change passwords again if necessary.
A scan found several suspicious processes. I’m concerned that opening protected documents or entering a passcode to access them could expose more information, and my phone also behaved strangely afterward.
I’m not sure how to change everything safely when I’m worried that passwords or login details could be captured. I also don’t know how to back up files without exposing them.