How to Tell If a Slow Windows PC Is Caused by Malware

    Diagnose whether sudden slowness on your Windows PC is hardware, bloatware, or a malware infection — and what to look for in Task Manager.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated June 2026 · 2 min read

    If your Windows PC has gone from working fine to crawling overnight, it is worth ruling out malware before you assume the hardware is failing. Cryptominers, spyware and adware often hide in the background and burn CPU, disk and network — sometimes only when you are not looking.
    This guide gives you a 10-minute checklist using only the tools built into Windows.

    Symptoms worth investigating

    • Boot time has doubled or tripled in the last few days or weeks
    • Fans are running constantly even when the PC is idle
    • Programs hang for several seconds when you launch them
    • Internet feels slow only on this PC (other devices on the same Wi-Fi are fine)
    • Disk activity light is constantly on with no obvious reason

    Step 1: Open Task Manager and sort by CPU

    1. Press Ctrl + Shift + Esc to open Task Manager
    2. If you only see a small window, click More details
    3. On the Processes tab, click the CPU column header to sort highest to lowest
    4. Watch for 30–60 seconds — anything constantly above 20% with no obvious reason is suspect
    5. Right-click anything suspicious and pick Search online to see if it is legitimate

    Important

    Common malware names try to look like Windows processes (e.g. svch0st.exe with a zero, or chrome_updater.exe). Always cross-check the file location via right-click → Open file location.

    Step 2: Check Startup apps

    Switch to the Startup apps tab in Task Manager. Anything you do not recognise that is set to Enabled with a high startup impact is worth investigating — especially if there is no publisher listed.

    Step 3: Check network activity at idle

    1. In Task Manager, switch to the Performance tab → Ethernet or Wi-Fi
    2. Close every browser, email client and chat app
    3. Watch the throughput graph for 60 seconds — sustained traffic at idle is a red flag

    What's next

    If anything from the checks above looks suspicious — or you simply cannot rule it out — run a full Malwarebytes scan to confirm and clean up.

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Device Security