Short answer: a machine that is only slow is usually old, full, or thermally throttled. A machine that is doing things you did not ask for — opening pages, sending mail, waking at night — is a different problem. Speed alone is a weak signal; behaviour is the strong one.
What “just slow” actually looks like
- It boots slowly every single day, and gets worse over months rather than overnight.
- Everything is slow — opening a file, switching tabs, saving a document — not just the browser.
- The fan runs constantly or the case is hot to touch.
- Disk or memory sits near 100% in Task Manager, with a regular application at the top of the list.
- Nothing new appeared. No strange windows, no unfamiliar logins, no mail you did not send.
That combination points at hardware age, a nearly full drive, too little memory for modern browsers, or a failing disk — not malware.
What an infection actually looks like
- The browser opens pages you did not ask for, or your search engine changed without you changing it.
- New toolbars, extensions or “security” add-ons appear.
- Files are renamed, replaced, or will not open, and a note appears asking for payment.
- Antivirus switched itself off, or will not update, or will not open at all.
- You are locked out of an account, or contacts receive messages you did not send.
- The machine is busy while you are doing nothing: fan loud, drive light flickering, network traffic at idle.
Any of those is behaviour, not performance. Treat them as an infection until proven otherwise.
The ten-minute test, in order
- Open Task Manager (Ctrl+Shift+Esc) and sort by CPU, then Memory, then Disk. A recognisable application at the top means load. An unfamiliar process with a random name, sitting at the top while you do nothing, means look closer.
- Check free space. Below about 10% free, Windows slows down measurably. This alone explains an enormous number of “my PC has a virus” calls.
- Check startup items and disable what you do not recognise — not delete, disable. If the machine gets faster, it was load.
- Look at the browser extensions on every browser you have installed. Remove what you do not use. Hijacks usually live here, not in the operating system.
- Check the drive’s health. A failing disk produces stutter, freezes and slow boots that look exactly like a virus to a non-technical eye.
When to stop the test and disconnect
If you see a ransom note, files that will not open, or someone else moving the pointer, stop. Disconnect from the network, do not pay anything on screen, and do not reinstall Windows until the files you cannot lose are copied somewhere else.
Why “it’s probably fine” is a bad default
Because the two problems have opposite costs. A slow machine is annoying and predictable. An infection that is left alone may be quiet for weeks while something copies your sessions, your mail and your saved passwords. If you cannot tell the difference with confidence, the cheap move is to have someone look at the startup items and the browser profile — that is minutes of work, not a rebuild of the machine.
Questions people ask
Can malware make a computer slow without any other sign? Yes, in the sense of a miner or a bot running quietly — but that shows up as CPU or network use while idle. Slowness with no idle activity is nearly always hardware or capacity.
Does reinstalling Windows fix it? It fixes software and wastes a day on hardware. If the disk is failing, you have reinstalled an operating system onto a dying drive.
Will a free scanner tell me the truth? It will tell you what it can see. It cannot see a browser profile that has been hijacked, an account that is being read, or a disk that is failing — which is why the checklist above comes first.