Device Audit & Cleanup guides
Step-by-step, expert-written advice on device audit & cleanup — no jargon, just practical guidance you can act on today.
How to Spot Unknown Apps Installed on Your Android Phone
How to Spot Unknown Apps Installed on Your Android Phone
Read guideHow to Remove Unknown Apps and Device Admins on Android
How to Remove Unknown Apps and Device Admins on Android
Read guideHow to Spot Unknown Apps and Profiles Installed on an iPhone
How to Spot Unknown Apps and Profiles Installed on an iPhone
Read guideRemove Unknown Apps & Profiles on iPhone
How to Remove Unknown Apps, Profiles, and Configurations on iPhone
Read guideHow to Spot Unknown Apps and Profiles Installed on an iPad
How to Spot Unknown Apps and Profiles Installed on an iPad
Read guideRemove Unknown Apps & Profiles on iPad
How to Remove Unknown Apps, Profiles, and Configurations on iPad
Read guideHow to Tell If You Installed a Malicious Linux Package, PPA, or AppImage
Audit recently installed apt/dnf/snap/flatpak packages, PPAs, and AppImages, and identify the malicious source.
Read guideHow to Find Hidden Cron Jobs and systemd Services on Linux
Audit user and root crontabs, /etc/cron.*, systemd timers, and user units to find malware persistence on Linux.
Read guideHow to Check for a Rootkit on Linux
Run chkrootkit and rkhunter, audit kernel modules and hidden files, and look for tell-tale rootkit symptoms on Linux.
Read guideHow to Tell If Your Linux SSH Has Been Compromised
Audit /var/log/auth.log, last, lastb, and ~/.ssh/authorized_keys to detect SSH brute-force or successful intrusion.
Read guideHow to Remove a Cryptominer From Linux Safely
Kill the process, clean persistence (cron, systemd, ld.so.preload), and verify you've removed all components.
Read guideHow to Remove Malicious Cron Jobs and systemd Services on Linux
Disable, mask, and delete malicious scheduled tasks and systemd units, and verify they don't respawn.
Read guideHow to Spot Compromise Inside Your Chromebook Linux (Crostini) Container
Audit processes, cron jobs, and unfamiliar packages inside the Linux container on ChromeOS.
Read guideHow to Recover and Re-secure Your Google Account on a Chromebook
Reset your Google password, sign out everywhere, audit recovery options, and turn on 2-Step Verification for Chromebook users.
Read guideHow to Spot a Malicious or Unwanted Chrome Extension on a Chromebook
Audit your Chrome extensions, spot the warning signs of malicious add-ons, and identify which one is causing redirects, ads, or stolen sessions.
Read guideHow to Tell If Your Google Account Was Compromised on a Chromebook
Audit Google Account activity, recent sign-ins, and connected devices when you suspect compromise on your Chromebook.
Read guideHow to Spot a Malicious Configuration Profile on Mac
Audit System Settings → Device Management for unauthorised macOS profiles.
Read guideHow to Safely Remove Unknown Apps From a Mac
Clean Mac uninstall procedure that catches the parts a drag-to-Trash misses.
Read guideHow to Audit Installed Apps on Your Mac
Quick Mac audit covering Applications, LaunchAgents and Login Items.
Read guideHow to Tell If a Slow Mac Is Caused by Malware
Use Activity Monitor and Login Items to confirm whether your slow Mac is infected.
Read guideHow to Safely Remove Unknown Programs From Windows
Uninstall unwanted Windows programs the right way — including ones that resist removal — and clean up the leftovers.
Read guideHow to Audit Installed Programs on Your Windows PC
Find programs you didn't install on Windows: where to look, how to spot bundled junk, and how to tell legitimate from malicious software.
Read guideHow to Audit User Accounts on Your Windows PC
List every account on the PC, check who is an administrator, and spot accounts created by malware or remote attackers.
Read guide