What to Do When Antivirus Finds Malware
A malware alert is the start of a response process: preserve the details, contain risk, remediate, and verify recovery.
Who this guide is for
Home users responding to a credible security-product detection.
Practical checklist
- Take a screenshot or export the alert details before clearing notifications.
- Allow quarantine or removal unless you have strong evidence that the file is safe.
- Disconnect from networks if the alert mentions credential theft, ransomware, or active remote access.
- Update the scanner and run a full or offline scan as appropriate.
- Review account sessions and change exposed credentials from a known-clean device.
Common mistake to avoid
Clicking through warnings without recording what was detected or whether remediation succeeded.
A safer way to proceed
Use the product log to confirm the threat, action taken, affected location, and final status.
Product features, prices, eligibility, and policies can change. Confirm important details on the provider’s official website before purchasing, renewing, changing account settings, or acting on a security alert. If an incident may involve financial loss, sensitive personal data, or a business network, consider qualified professional help and the appropriate official reporting channel.