How to Check for Malware Before You Move Devices

About to switch to a new phone or computer? Take a few minutes to check your current device for malware first, so you don’t carry problems to the new one. This guide walks you through safe, simple checks for Windows, macOS, iOS, and Android, plus your home router (the box that creates your Wi‑Fi network). You’ll finish with a clean, safe backup ready to move.

Table of Contents

• Table of Contents
• Before You Start
• Quick Fix Steps
• Deeper Diagnosis
• Preventive Care
• When to Seek Help
• Frequently Asked Questions

Before You Start

Goal: Confirm your current device is clean, then make a safe backup to move to your new device.

• What you need: A stable internet connection, your device charger, and (optional) a USB drive or external hard drive for backups.
• Time estimate: 45–90 minutes (most of it is scanning time).
• Difficulty: Easy to Medium.
• What can go wrong: Scans can quarantine files you need, or a bad extension can keep reinstalling. Make a list of anything removed so you can review later.

Warning: Do not edit the Windows Registry, install random “cleaners,” or run tools you don’t recognize. Avoid factory resets unless you have a good backup and you’re sure you need it (see FAQs below).

Quick Fix Steps

1. Update your operating system. Updates fix security holes. Install all available updates, then restart.
2. Update your web browsers and remove suspicious extensions. Uninstall any add-ons you don’t recognize or no longer use.
3. Run a malware scan using your built-in or trusted antivirus. Start with a Quick Scan, then do a Full Scan. Quarantine anything it finds.
4. Change important passwords from a clean device (another phone/computer you trust). Start with email, bank, and your main app store account. Turn on two-factor authentication (2FA) where possible.
5. Back up only your personal files (documents, photos, videos) after the scan completes. Avoid cloning the whole system if you suspect infection.
6. Restart your router and modem by unplugging them for 20 seconds, then plug back in. This clears temporary glitches.

Windows

• Settings > Windows Update > Check for updates. Restart.
• Open Windows Security (built-in) > Virus & threat protection > Quick scan, then Full scan. Consider “Offline scan” for stubborn threats.
• Remove unwanted startup apps: Right‑click Taskbar > Task Manager > Startup apps > Disable items you don’t recognize.

macOS

• System Settings > General > Software Update. Restart.
• System Settings > General > Login Items > remove unknown items.
• Check Profiles: System Settings > Privacy & Security > Profiles (if present) > remove profiles you didn’t create.

iOS (iPhone/iPad)

• Settings > General > Software Update. Restart.
• Settings > General > VPN & Device Management (or Profiles) > remove unknown profiles or VPNs.
• Delete apps you don’t recognize or that show intrusive ads.

Android

• Settings > System > System update (names vary). Restart.
• Open Play Protect (Settings > Security & privacy > App security) > Scan.
• Settings > Apps > Special access > Device admin apps / Accessibility > turn off unknown entries.

Tip: If a browser keeps opening unwanted sites, reset that browser to default settings and remove all extensions. Re-add only what you truly need.

Deeper Diagnosis

1) Look for common signs

• Unexpected pop-ups or redirects, especially when you’re not browsing sketchy sites.
• High fan/CPU usage when idle; battery draining fast.
• New toolbars, strange search engines, or apps you didn’t install.

2) Check your network gear (modem/router)

Your router is your home’s traffic cop. If it’s compromised, every device is at risk.

• Confirm lights: Power solid. Internet/Link solid or blinking. Wi‑Fi blinking during activity. If Internet is off or red, contact your ISP.
• Log in to your router’s admin page: try http://192.168.1.1 or http://192.168.0.1. Username/password may be on a sticker. Change the admin password if it’s default.
• Look for DNS settings. They should typically be set to “Automatic” or to servers you chose. If you see unknown DNS servers, switch to Automatic or enter known-good ones from your ISP.
• Turn off “Remote Management” unless you need it.
• Check for firmware updates in the router menu. Apply updates and reboot.

Warning: Don’t reset your router to factory settings unless you have your internet setup details. If unsure, call your ISP for guidance.

3) Extra OS checks

Windows

• Run a deeper scan: Windows Security > Virus & threat protection > Scan options > Offline scan.
• Check Hosts file (used for website lookups): View C:\Windows\System32\drivers\etc\hosts in Notepad. It should mostly have lines starting with #. If you see many entries pointing common sites to strange numbers, that’s suspicious. Do not edit unless you know what you’re doing.
• Clear DNS cache if you have redirect issues: Open Command Prompt as Administrator and run ipconfig /flushdns. This just clears a cache; it’s safe.

Optional reference: See Microsoft’s official steps for Windows Safe Mode if malware blocks scans.

macOS

• Use Activity Monitor to spot heavy CPU tasks you don’t recognize. Quit them and note the names.
• Check Hosts file (read-only): open Terminal, run open /etc/hosts. If you see many entries rerouting common sites, that’s suspicious. Close without saving.
• Boot to Safe Mode to run checks without extras: see Apple’s guide to macOS Safe Mode.

iOS

• Settings > Battery > Battery Usage: look for unknown apps using lots of power. Remove them.
• If Safari misbehaves: Settings > Safari > Clear History and Website Data.
• If issues persist: Settings > General > Transfer or Reset > Reset > Reset Network Settings (does not erase your data).

Android

• Boot into Safe Mode to disable third‑party apps temporarily (steps vary by device; see Google’s guide to Android Safe Mode).
• Settings > Privacy > Permission manager: revoke camera/microphone/SMS permissions from apps that shouldn’t need them.
• Browser issues: clear cache/data for the affected browser in Settings > Apps.

4) Browser cleanup (all platforms)

• Remove all extensions you don’t absolutely trust.
• Set your default search engine back to your choice.
• Reset browser settings to default, then sign back into only the accounts you use.

5) Account hygiene

• Email: Check for suspicious “Forwarding” rules or auto‑replies you didn’t set.
• Cloud storage: Remove unknown shared folders or apps with access.
• Turn on 2FA for email, banking, and your main app store account.

Note: If your scans find nothing but problems persist (pop‑ups, redirects, warnings), it could be a bad extension, a rogue profile, or router DNS tampering. Tackle those first.

Preventive Care

• Keep everything updated: OS, browsers, and apps. Turn on automatic updates.
• Back up regularly using the 3‑2‑1 rule: three copies, two types of storage, one off‑site (cloud or a drive stored elsewhere).
• Passwords: Use long, unique passwords. A trustworthy password manager helps you keep track. Enable 2FA where you can.
• Safe downloads: Only install apps from official stores or the developer’s own site. Avoid “free” installers that bundle extras.
• Least privilege: Use a standard (non‑admin) user account for daily work on computers. Only use admin rights to install software.
• Router care: Change the admin password, update firmware a few times a year, and disable remote management. Use a guest network for smart home devices if your router supports it.

When to Seek Help

• Your antivirus keeps detecting the same threat after cleanup or you see ransomware notes. Power off and contact a professional.
• Bank or email accounts show unfamiliar logins or charges. Change passwords from a clean device and call your bank/email provider.
• You cannot access the router admin page, or DNS/settings keep changing back. Call your ISP or router maker’s support.
• Essential updates won’t install, or the device crashes repeatedly. A local repair shop or the device maker’s support can help.
• On phones: constant overheating, pop‑ups outside the browser, or unknown apps reappearing. Seek professional help.

Conclusion: After updates, scans, browser cleanup, and router checks, make a fresh backup of only your personal files. On the new device, reinstall apps from official stores instead of copying old installers. Move your clean files, sign in with 2FA, and enjoy a fresh start.

Frequently Asked Questions

Should I factory reset before moving to a new device?

Only if problems persist after scans and cleanup. Back up your personal files first. Warning: A reset erases your apps and settings. Make sure you know your passwords and 2FA methods before you reset.

Can malware spread through cloud storage?

Yes, if you upload infected files. Scan your device first, back up only personal documents and photos, and avoid backing up suspicious installers or unknown ZIP files.

What’s the safest way to move to my new device?

Scan and clean the old device, then copy only personal files. Reinstall apps fresh from the official app store or developer site. Turn on 2FA and restore settings manually to avoid bringing over junk.

Do Macs and iPhones need antivirus?

iPhones don’t use traditional antivirus; keep iOS updated and avoid sideloading apps. Macs benefit from regular updates and can use reputable security software if you want extra checks. Good habits (updates, safe downloads, 2FA) are essential on every platform.