Nobody plans to lose their holiday photos, their dissertation or a month of invoices. It usually happens on an ordinary Tuesday, after someone clicks a link in a message that looked like a courier notice, or installs a “free” program they only needed once.
The frustrating part is that the damage is rarely about the virus itself. It is about what was unprotected when it arrived: an old update, a reused password, a backup that was never made. That is why computer virus prevention is worth doing now, while everything still works, rather than after the screen has frozen and a ransom note has appeared.
This guide is aimed at ordinary UK computer users: people working from home, students sharing a flat network, families with one laptop between them, and small businesses with no IT department. None of it needs technical skill.
Why waiting is the real risk
When people say “virus”, they usually mean malware, an umbrella term for software designed to cause harm. That includes ransomware, which locks your files until you pay, spyware, which watches what you do, and trojans, which pretend to be something useful.
The uncomfortable truth is that most malware doesn’t break in. It is invited in. Someone opens an attachment, approves a prompt or installs something from an unreliable site. Because the attacker is relying on a moment of distraction rather than clever hacking, no software can fully protect you from your own click. Prevention is therefore a mix of tools and habits, and the habits need to be in place before the moment of distraction arrives.
It also helps to be honest about the limits. No combination of settings and software gives you 100% protection. The aim is to make your computer a harder, less rewarding target and to make sure that if something does go wrong, you can recover quickly.
The common ways computers get infected
Understanding the routes makes the advice easier to remember:
- Phishing messages by email, text or social media, designed to make you click or hand over details
- Unsafe downloads, particularly cracked software, pirated films and games, and unofficial “free” versions of paid programs
- Fake alerts that claim your computer is infected and push you towards a phone number or a “cleaning” tool
- Unpatched software, where a known weakness has a fix that nobody has installed
- Infected USB sticks and external drives
- Browser extensions that start out harmless but request far more access than they need
Install updates promptly
Update prompts are easy to dismiss, but they are one of the most effective forms of malware protection you have. Many updates fix security flaws that have already been found. Once a flaw is known, anyone who hasn’t applied the fix remains vulnerable, and criminals do check for exactly that.
Turn on automatic updates for your operating system, your browser and the applications you use most. Include your phone and tablet, and give your router a thought too, since many households never touch theirs after installation.
Be wary of software that is no longer supported. Windows 10, for example, reached the end of its standard support in October 2025, which means ordinary security updates stopped unless you have signed up to an extended scheme. If your device can’t run a supported system, speak to the manufacturer or consider replacing it. Running unsupported software is a bit like leaving a lock you know is broken.
Use antivirus software, but don’t treat it as a force field
Antivirus software is a valuable safety net. It recognises known threats and flags suspicious behaviour. It can, however, miss brand-new attacks, and it cannot stop you voluntarily typing your password into a convincing fake page.
For many households, Microsoft Defender, which is built into Windows, is a sensible starting point provided it is switched on and updated. Paid security suites can add extras such as web filtering, a firewall and device management for the whole family, and they may suit you if you want everything in one place. Whichever you choose, stick to one main product from an established provider, because running several at once can cause conflicts.
Also be careful where you get it from. Fake antivirus is a classic trick: a pop-up announces that you have a dozen infections and offers a free fix, and the fix is the infection. Only download security software from the vendor’s own website or your device’s official app store.
Treat unexpected messages with suspicion
Phishing is effective because it borrows trust. The message might appear to come from your bank, HMRC, a delivery company, your broadband provider or a colleague. It will often create urgency: a payment has failed, a parcel is waiting, your account will close.
Pause if a message:
- Pushes you to act within minutes
- Comes from an address that looks nearly right but not quite
- Asks you to log in, pay or verify details through a link
- Includes an attachment you weren’t expecting, especially a zipped file or a document asking you to “enable editing” or “enable macros”
Rather than clicking, go to the organisation’s website by typing the address yourself, or use its official app. If a message claims to be from someone you know, check with them by another route.
You can forward suspicious emails to the National Cyber Security Centre at [email protected], and suspicious texts to 7726, which is free on UK networks. It takes seconds and helps to get scam sites taken down.
Download with care
Safe browsing mostly means slowing down. Get software from the developer’s official site or a recognised app store. Be aware that some search results at the top of the page are adverts, and criminals have paid for adverts that imitate genuine download sites. Checking the web address before you click “download” is a small habit with a big payoff.
Cracked software, pirated media and “PC booster” tools are among the riskiest things you can install. The people distributing them have no interest in your security, and malware is often the real product. If something is offered free that normally costs money, ask yourself who is paying for it.
Review your browser extensions every so often. Remove anything you no longer use, and be cautious about any that ask to read and change everything on every site you visit.
Strengthen your passwords
A stolen password can be just as damaging as malware, and malware is often used to steal them. The most helpful habit is to use a different password for each important account, so that one leak doesn’t open every door.
Nobody can memorise dozens of strong passwords, so consider a reputable password manager. For the few you do need to remember, such as your device login or the manager itself, the NCSC suggests combining three random words, which creates something long and still memorable.
Switch on two-step verification wherever it’s offered, starting with your main email account. Email is the key to resetting almost everything else, so protecting it protects the rest.
Be careful with USB sticks and shared computers
A memory stick that travels between home, university and work can carry malware from place to place without anyone noticing. Don’t plug in a drive you have found or been handed by a stranger, and run a scan on unfamiliar ones before opening any files.
On a shared family computer, create separate user accounts. Give children and other occasional users standard accounts, and keep the administrator account, which can install software, protected with its own strong password. If someone does click the wrong thing, the damage is more likely to stay contained.
Back up before you need to
If there is one habit that most separates a bad day from a disaster, it is backing up. Backups won’t stop an infection, but they decide how much it costs you.
A sensible rule is to keep at least two copies of anything important, with one stored away from the computer. That might be an external drive that you unplug once the backup finishes, or a trusted cloud service. Ransomware can encrypt anything connected to your machine, including a drive that is permanently plugged in.
Test your backup occasionally by restoring a file or two. A backup you have never tried to restore is more of a hope than a plan.
For small businesses, tested backups are essential. If customer records or accounts live on a single machine, losing them is not just inconvenient. If personal data is involved, you may also have obligations under UK data protection law, including reporting certain breaches to the Information Commissioner’s Office. Schemes such as the government-backed Cyber Essentials offer a clear, practical baseline if you want a structured way to improve.
If you think your computer is infected
Possible signs include sudden slowness, pop-ups you can’t explain, programs you don’t remember installing, a changed browser homepage, security software that has switched itself off, or friends reporting strange messages from your accounts. None of these proves an infection, but together they deserve attention.
If you are concerned, stay calm and work through this order:
- Disconnect from the internet by turning off Wi-Fi or unplugging the cable, so that malware can’t communicate or spread.
- Run a full scan with your security software, after making sure it is up to date.
- Remove what it finds, and uninstall any programs or extensions you don’t recognise.
- Change your passwords from a different, clean device, beginning with email and banking.
- Contact your bank immediately if you have entered payment details or allowed a stranger to access your computer remotely.
- Restore from a backup or get professional help if problems continue. Resetting the system is sometimes the safest route.
If you have lost money or been scammed, report it to Action Fraud in England, Wales and Northern Ireland, or to Police Scotland on 101 in Scotland. If it happened on a work device, tell your IT team or manager straight away. Embarrassment is understandable, but speed makes the biggest difference.
The bottom line
Good computer virus prevention is not one clever purchase. It is a set of small, dull habits that work together: updated software, reputable antivirus protection, a healthy doubt about unexpected messages, careful downloads, strong passwords and reliable backups. None of them is perfect alone, and together they still don’t make you invincible, but they make you far harder to catch out and far easier to recover.
You don’t need to do everything today. Choose one thing, such as turning on automatic updates or plugging in that external drive and running a proper backup, and do it before the next suspicious message arrives.
