If you think a keylogger is on your Windows PC, work through these steps in order. Stop banking or logging into sensitive accounts from the machine until it is clean.

1. Review running processes

Open Task Manager (Ctrl+Shift+Esc) and look under the Processes and Startup tabs for anything you do not recognize. Search unfamiliar names online before acting. Do not end critical Windows processes.

2. Check startup and scheduled tasks

Keyloggers want to survive reboots. Review Startup apps in Settings and open Task Scheduler for suspicious entries that launch programs at logon.

3. Look at installed programs

In Settings › Apps, sort by install date. Monitoring tools sometimes appear under generic names — research anything you did not install.

4. Run a full anti-malware scan

Use Microsoft Defender (Full scan, and an Offline scan for stubborn threats) and ideally a second reputable on-demand scanner. Let both remove or quarantine what they find.

🔐
After cleanup, rotate your passwordsAssume anything typed on the device may have been captured. Change important passwords from a different, trusted device, and enable two-factor authentication everywhere.

5. Update everything

Install pending Windows updates and update your browser and apps. Many infections exploit known, already-patched bugs.

6. When in doubt, reset

If problems persist or the infection is deep, a clean reinstall (Reset this PC › Remove everything) is the most reliable fix. Back up personal files first, but not program installers.

Prevent the next one