Anti-Virus or Malware - Immediate Containment

Use this if your device shows a malware alert, suspicious pop-up, unknown installer, or other security warning.

Quick checks

• Disconnect from Wi-Fi or Ethernet if the alert indicates compromise or the device behaves suspiciously.
• Do not enter passwords or sensitive information on the device.
• Do not delete the alert before IT reviews it.
• Do not repeatedly restart unless IT asks you to.

Steps to try

1. Submit an Anti-Virus / Malware ticket.
2. Enter the affected device name.
3. Answer whether the device is disconnected from the network.
4. Attach or include a screenshot of the alert if possible.
5. Wait for IT before continuing work on that device.

Submit a ticket when

• Defender, antivirus, browser, or OS shows a malware/security alert.
• An unknown installer or app appeared.
• The device behaves suspiciously.
• You are unsure whether the device is safe.

Official references

• Microsoft Defender device response actions
• Windows Security virus and threat protection