Back to Technology, Data & Innovation

Security Tip: Removing Malware

What to Do if You Suspect Malware

Malware, including viruses, ransomware, spyware, and other malicious software, can impact the security and performance of your computer. If you believe your device may be infected, follow the steps below to help protect your data and prevent further damage.

Signs Your Device May Be Infected

You may have malware if you notice any of the following:

  • Unexpected pop-ups or security warnings
  • Slow system performance
  • Applications opening or closing unexpectedly
  • Unknown software appearing on your device
  • New browser toolbars, extensions, or homepage changes
  • Unusual account activity or password prompts
  • Files becoming inaccessible or encrypted

Immediate Actions

If you suspect malware:

  1. Disconnect your device from WiFi and any wired network connections.
  2. Stop entering passwords until the device has been assessed.
  3. Avoid conducting banking, payroll, or other sensitive activities.
  4. Save any important work if possible.
  5. Contact the Technology, Data & Innovation (TDI) Help Desk for assistance.

Early reporting allows Trinity staff to assess the issue before it spreads or causes additional damage.

Scan Your Device

Trinity-Owned Faculty and Staff Devices

Trinity-managed computers are protected and monitored using CrowdStrike Falcon and other enterprise security tools.

If you suspect malware on a Trinity-owned device:

  1. Disconnect from WiFi or the network if possible.
  2. Stop using the device for sensitive activities such as online banking or password changes.
  3. Run an on-demand CrowdStrike scan:
    • Locate the CrowdStrike Falcon icon in the system tray (Windows) or menu bar (macOS).
    • Right-click the CrowdStrike Falcon icon.
    • Select Scan Device (if available).
    • Allow the scan to complete and follow any prompts.
  4. Contact the TDI Help Desk if malware is detected or if you continue experiencing unusual behavior.

Note: Some Trinity-managed devices may not display user-initiated scan options. In these cases, CrowdStrike continues to provide real-time protection and monitoring in the background. If you suspect malware, contact the TDI Help Desk for assistance.

Personally Owned Student Devices

Students using personal devices should:

  • Ensure their operating system is up to date.
  • Run Microsoft Defender (Windows) or another reputable antivirus product.
  • Consider using Malwarebytes Free for an additional malware scan.
  • Contact the TDI Help Desk if assistance is needed connecting to Trinity resources following a malware incident.

Recommended options include:

Windows

  • Microsoft Defender Antivirus (included with Windows)
  • Malwarebytes Free

macOS

  • Built-in macOS security protections
  • Malwarebytes Free for Mac

If malware is detected, follow the recommendations provided by the security software and restart the device if required.

Students who continue to experience issues after scanning should contact the TDI Help Desk for assistance.

Keep Your Operating System Updated

Software updates frequently include security fixes for newly discovered vulnerabilities.

Windows

  1. Open Settings.
  2. Select Windows Update.
  3. Select Check for updates.
  4. Install all available updates.

macOS

  1. Open System Settings.
  2. Select General.
  3. Select Software Update.
  4. Install all available updates.

Promptly installing updates helps reduce the risk of infection.

Recovering from an Infection

In some situations, restoring files from a backup may be the safest recovery option.

Windows Recovery

Windows includes recovery and reset options that may be used when a system cannot be repaired through normal remediation. Contact the Help Desk before using recovery options on institution-owned devices.

Time Machine for Mac

Mac users who utilize Time Machine backups may be able to restore files or recover their system from a known good backup.

To learn more about Time Machine:

  1. Open System Settings.
  2. Select General.
  3. Select Time Machine.

When Safe Mode May Help

Most malware can be detected and removed without using Safe Mode. However, Safe Mode may be useful if security software cannot run normally or malware is preventing the system from functioning correctly.

Because Safe Mode procedures vary by operating system version, consult current Microsoft or Apple documentation or contact the Help Desk for assistance.

Preventing Future Infections

You can reduce the risk of malware by following these security practices:

  • Keep your operating system and applications updated.
  • Enable and maintain antivirus protection.
  • Be cautious when downloading software.
  • Only install applications from trusted sources.
  • Avoid opening unexpected attachments or links.
  • Use multifactor authentication whenever available.
  • Report suspicious emails using Trinity’s phishing reporting tools.
  • Regularly back up important data.

Need Assistance?

If you believe your Trinity account or device has been compromised, contact the Technology, Data & Innovation Help Desk as soon as possible.

Email: [email protected]
Phone: 860-297-2007
Portal: IT Services Portal

Prompt reporting helps Trinity respond quickly and minimize the impact of potential security incidents.