My Dell laptop appears to have been infected with malware, and my Discord account was compromised and used to send scam messages to my contacts. I disconnected the laptop from the internet and let its battery die, then left it unused for about two weeks. Windows Defender and Malwarebytes detected roughly 20 Trojan threats. I removed them, but another threat appeared about 10 minutes later. I cannot get into Safe Mode, and I thought the encrypted drive could not be wiped. Is the laptop still recoverable, and what is the safest way to restore it?
4 Answers
You can wipe the disk from the Windows installer or, on some Dell systems, from a BIOS storage-wipe utility. The diskpart commands can do this too, but be extremely careful to select the correct disk. A normal clean reinstall is usually enough; a full zero-fill pass is rarely necessary and takes much longer. If you do not have another computer, you may need to borrow one or have a repair shop create the installer USB.
The safest approach is to treat the installation as compromised and perform a clean reinstall rather than repeatedly removing individual detections. Create a Windows installation USB from a known-clean computer, boot the Dell from it, delete every partition on the internal drive, and install Windows again. Drive encryption does not prevent you from erasing the drive; it only protects the data that is currently on it. This will remove Windows and all personal files, so back up only files you can verify are safe.
If you want one last check before erasing everything, boot an offline antivirus rescue environment from a clean USB and scan the drive. However, repeated detections shortly after removal are a good reason not to trust the existing installation. Since the laptop has already been offline, leave it disconnected until the wipe and reinstall are complete.
Before reconnecting the laptop, use a separate trusted device to change your email and Discord passwords, enable two-factor authentication, revoke active sessions, and check for unfamiliar recovery settings. Assume any passwords entered on the infected laptop may have been captured. Once Windows is reinstalled, update it fully and reinstall programs only from their official sources.
Formatting the system partition will remove Windows, but that is expected here. Afterward, boot from the installer USB and install a fresh copy of Windows.