Think a device on your home Wi-Fi may have malware? Acting quickly can protect your accounts, files, and other devices. This guide shows you how to disconnect the suspicious device, secure your network, check for infection, and safely reconnect.<\/p>\n
Router:<\/strong> The box that creates your home Wi-Fi network. It may be separate from your modem, or both devices may be combined. Malware:<\/strong> Harmful software that can steal information, damage files, or misuse a device.<\/p>\n Warning:<\/strong> Do not download \u201ccleaner\u201d tools from pop-up ads. Do not edit the Windows Registry or install an unknown program just because a message says your computer is infected. If you must download a security tool, use the official website or your device\u2019s built-in security app.<\/p>\n Turn off Wi-Fi on the device, unplug its network cable, or power it off. If the device is difficult to control, unplug it from power. Keep it disconnected until it has been checked.<\/p>\n Do not open email, banking, shopping, or work accounts on that device while you investigate. Use a different device that you believe is clean for password changes and support calls.<\/p>\n Temporarily disconnect devices that do not need internet access, especially shared computers, smart cameras, storage drives, and children\u2019s tablets. Leave essential devices connected only if you need them to contact help.<\/p>\n Tip:<\/strong> Write down which device was suspicious and when you first noticed the problem. This information can help your internet provider or a technician.<\/p>\n Using a device you trust, change the password for your email first, then your banking, shopping, social media, and cloud-storage accounts. Use a different password for each account. Turn on two-step verification when available.<\/p>\n If you used the suspicious device for banking or entered payment details, contact your bank using the number on your card or its official website.<\/p>\n Open your router\u2019s management page using the address printed on its label or in its manual. Common private addresses include Review the list of connected devices. Remove or block anything you do not recognize, but first confirm that it is not a printer, television, speaker, camera, or smart-home device. Check that the Wi-Fi name, Wi-Fi password, and administrator password have not changed.<\/p>\n After the suspicious device is disconnected, update its operating system and security software. Run a full scan, not only a quick scan. Follow the security app\u2019s instructions to quarantine or remove anything it finds.<\/p>\n Note:<\/strong> Quarantine means placing a suspicious file where it cannot run. Do not restore a quarantined item unless a trusted security professional confirms that it is safe.<\/p>\n Look at the indicator lights. A normal pattern varies by model, but power should usually be steady, the internet light should be connected, and the Wi-Fi light should be on if wireless service is enabled.<\/p>\n Restart the modem and router by unplugging them, waiting about 30 seconds, and plugging them back in. This can clear temporary problems, but it does not remove malware from a device.<\/p>\n Warning:<\/strong> Do not press the small factory-reset button unless you are ready to rebuild the network. A factory reset erases Wi-Fi names, passwords, port settings, and other custom settings. Read the manual first and save any settings you may need.<\/p>\n Sign in to the router\u2019s management page and look for sections called \u201cConnected Devices,\u201d \u201cAttached Devices,\u201d \u201cClients,\u201d or something similar. Compare the list with the devices in your home.<\/p>\n Unknown names are not always dangerous. Some devices display a manufacturer name or a string of letters instead of a familiar name. Turn devices off one at a time and refresh the list to identify them. Block a device only when you are confident it is unwanted.<\/p>\n Look for new apps, browser extensions, toolbars, unexplained pop-ups, slow performance, overheating, or settings that changed without permission. Remove software you do not recognize, but do not remove essential system files.<\/p>\n Windows:<\/strong> Open Settings<\/strong>, then Windows Update<\/strong>, and install available updates. Open Windows Security<\/strong>, choose the virus and threat protection area, and run a full scan. To view network details, open Command Prompt and enter macOS:<\/strong> Open System Settings<\/strong>, then General<\/strong>, and check for software updates. Review Login Items<\/strong> for unfamiliar programs and remove only items you recognize as unwanted. Check browser extensions and installed applications as well.<\/p>\n iPhone or iPad:<\/strong> Install updates under Settings > General > Software Update<\/strong>. Review unfamiliar apps and remove them. Check Settings > General > VPN & Device Management<\/strong> for profiles you did not install; ask your school or employer before removing a managed profile.<\/p>\n Android:<\/strong> Install system updates under Settings<\/strong> and review apps under Settings > Apps<\/strong>. Remove unfamiliar apps, especially those installed outside the official app store. Run the built-in security scan if your phone provides one.<\/p>\n If scans cannot remove the malware, back up personal files such as photos and documents, but do not back up unknown programs or suspicious files. Then consider a full device reset using the manufacturer\u2019s official instructions.<\/p>\n Warning:<\/strong> A reset erases data. Confirm that you know your account password, have a backup, and can reinstall needed apps before starting. When the reset is complete, update the device before restoring files.<\/p>\n Contact your internet provider if the router shows unknown changes, several devices behave strangely, your connection is repeatedly redirected, or you cannot regain control of the router. Ask the provider how to secure or replace the router without losing important service settings.<\/p>\n Contact a qualified computer professional if malware returns after a reset, files are encrypted, accounts are being accessed, or the device contains sensitive work or financial information. If you see unauthorized bank activity or identity theft, contact the bank and the relevant authorities promptly.<\/p>\n Do not pay a caller or pop-up that demands gift cards, cryptocurrency, or remote access. End the contact and find support through an official website or a number on a bill or payment card.<\/p>\n Isolation limits the damage: disconnect the suspicious device, protect accounts from a clean device, inspect the router, and run trusted updates and scans. Keep records of what you found, and get professional help when the router, accounts, or important files may be compromised.<\/p>\n No. Restarting can fix a temporary connection issue, but it does not remove malware from a computer, phone, or other device.<\/p>\n Yes, if you suspect the router password was exposed or an unknown device joined the network. Change it from a clean device, then reconnect your trusted devices.<\/p>\n Only when necessary. Keep it disconnected from the network while scanning or backing up files. Avoid opening sensitive accounts on it.<\/p>\n No. Phones, televisions, printers, and smart devices may use unfamiliar names. Identify devices by turning them off one at a time before blocking them.<\/p>\n","protected":false},"excerpt":{"rendered":" Learn how to isolate malware on your home network, secure your router, scan devices, protect accounts, and know when to call your ISP or a professional.<\/p>\n","protected":false},"author":1,"featured_media":993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[9],"tags":[],"class_list":["post-994","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-docs"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/blog.asambe.ai\/wp-content\/uploads\/2026\/09\/2026-09-23-23-21-08-data.png?fit=1024%2C1024&ssl=1","_links":{"self":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts\/994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/comments?post=994"}],"version-history":[{"count":1,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts\/994\/revisions"}],"predecessor-version":[{"id":995,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts\/994\/revisions\/995"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/media\/993"}],"wp:attachment":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/media?parent=994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/categories?post=994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/tags?post=994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Quick Fix Steps<\/h2>\n
1. Disconnect the suspicious device<\/h3>\n
2. Protect other devices<\/h3>\n
3. Change important passwords from a clean device<\/h3>\n
4. Check the router for unknown settings<\/h3>\n
192.168.0.1<\/code> and 192.168.1.1<\/code>, but your router may use another address.<\/p>\n5. Update and scan<\/h3>\n
Deeper Diagnosis<\/h2>\n
Check the modem and router<\/h3>\n
Review connected devices<\/h3>\n
Check the affected device<\/h3>\n
Operating-system checks<\/h3>\n
ipconfig \/all<\/code>; this displays connection information but does not repair anything.<\/p>\nReset only when necessary<\/h3>\n
Preventive Care<\/h2>\n
\n
When to Seek Help<\/h2>\n
Conclusion<\/h2>\n
Frequently Asked Questions<\/h2>\n
Will restarting the router remove malware?<\/h3>\n
Should I change the Wi-Fi password?<\/h3>\n
Can I keep using the infected device offline?<\/h3>\n
Is every unknown router device malware?<\/h3>\n