How to Tell If Your PC Has a Virus (Without Antivirus)

Let me tell you something that happened to me a couple of years ago. A client called in a panic because his PC was “running slow.” I asked if he had antivirus software, and he said yes — the free one that came pre-installed. When I sat down in front of the machine, the hard drive was thrashing away on its own, the fan sounded like a hair dryer, and there were three browser toolbars he swore he’d never installed. Spoiler: he had four different types of malware, and the antivirus hadn’t batted an eye.

The truth is, you can detect a lot of infections before you even run a scan. The human body runs a fever when something’s wrong — your PC has its own symptoms too. You just need to know how to read them.

Performance That Doesn’t Add Up

The first red flag is when your machine slows to a crawl for no obvious reason. Open Task Manager (Ctrl + Shift + Esc) and check the Processes tab. Is something eating 80% of your CPU while you’re just sitting there? Is there a process with a weird name like svchost32.exe? Malware loves to disguise itself with names that look almost identical to legitimate system processes — an extra letter here, a number tacked on at the end.

Disk usage is just as telling. If your hard drive activity light is blinking constantly while the machine is idle, something’s running in the background. Sure, it could be Windows indexing files. But if it’s been going on for hours, it’s time to start getting suspicious.

A Browser That Does Whatever It Wants

If your homepage changed on its own, if you’re suddenly seeing ads on sites that never had them before, or if a Google search somehow lands you on a search engine you’ve never heard of — welcome to the world of adware and browser hijackers.

Check your browser extensions. In Chrome, head to chrome://extensions. If you see anything you don’t remember installing, get rid of it immediately. Don’t give it the benefit of the doubt. These things don’t belong there, and they know it — that’s why they try to blend in with vague names like “Shopping Helper” or “PDF Converter Pro.”

It’s also worth checking your browser’s startup page settings and default search engine directly in the browser settings menu. Hijackers often plant themselves in multiple places so that removing just the extension doesn’t fully clean things up.

Suspicious Network Connections

Open a Command Prompt as administrator and type netstat -ano. You’ll see all active network connections. Look for any process with a suspicious name that’s maintaining persistent connections to unfamiliar IP addresses. Grab that PID number from the last column and cross-reference it in Task Manager to see exactly which process it belongs to.

You’re not expecting to find anything alarming every time — most connections will be perfectly normal. But if you spot a process you don’t recognize phoning home to some remote server while you’re just browsing, that’s worth investigating further. A quick search for the IP address can tell you a lot.

Your Antivirus Is Off — And You Didn’t Turn It Off

This one’s almost darkly ironic. One of the clearest signs of an active infection is finding that your security tool has been disabled. A lot of malware makes disabling Windows Defender its very first task after installation. If you open Security settings and find that real-time protection is switched off — and you can’t turn it back on — that’s a serious warning sign, not a glitch.

The same goes for other unexpected behavior: if you can’t open Task Manager, if the Registry Editor is suddenly blocked, or if safe mode won’t load properly, something has actively interfered with your system’s defenses. These aren’t accidents.

Other Symptoms Worth Watching

There are a few more things that tend to fly under the radar. Random pop-ups appearing outside your browser — as desktop notifications or standalone windows — are a classic giveaway. So is your PC spontaneously rebooting, or programs crashing more frequently than usual. If friends are telling you they’re receiving strange emails or messages from your accounts, that’s an especially urgent sign that something’s compromised.

Pay attention to your internet connection too. If your bandwidth seems unusually high even when you’re not doing anything, something might be using your connection to send data or participate in a botnet without your knowledge.

What to Do If Everything Points to an Infection

Download Malwarebytes (free version) on a clean device, transfer it to a USB drive, and run it on the affected machine. It’s not a conventional antivirus — it catches things that traditional antivirus software regularly misses. Another tool I’d recommend is HitmanPro, which is particularly effective against adware.

If the system is so compromised that you can’t even run tools normally, boot into Safe Mode with Networking (press F8 or Shift + Restart during boot) and try from there. Some infections specifically prevent removal when Windows is running in its normal state.

And if things are really bad? Sometimes the cleanest fix really is a full reinstall. It’s not fun, but it’s thorough. No patch job is ever going to be as complete as starting fresh — especially if you’re dealing with something like a rootkit that’s buried itself deep in the system. Back up what you need, wipe it, and rebuild. You’ll actually feel better about the machine afterward.