A woman — let's call her Margaret — came in one afternoon looking genuinely rattled. Her laptop had been "acting possessed," as she put it. Browsers opening by themselves. The cursor occasionally drifting without her touching the trackpad. Random pop-ups appearing at odd hours. Her laptop was slow, strange, and frankly frightening to use. A neighbour had told her it was almost certainly a virus, possibly a serious one, and that her bank details were probably already compromised.

She'd run a free antivirus tool she'd found online, which — to make things worse — had then shown her a list of 47 "critical threats" and demanded £39.99 to remove them. She hadn't paid. Wisely, as it turned out.

She brought the machine in expecting bad news. What she got instead was rather more surprising.

What the Symptoms Actually Looked Like

To be fair to Margaret's neighbour, the symptoms did look suspicious on the surface. Specifically:

  • The browser (Chrome) was occasionally opening on its own after startup
  • Several tabs would load automatically — mostly shopping and news sites she hadn't visited
  • The trackpad seemed to move unprompted, particularly in the first few minutes after boot
  • Random notification-style pop-ups were appearing from the bottom-right of the screen
  • The laptop was noticeably slow, and the fan ran almost constantly

In isolation, any one of those could have a perfectly innocent explanation. All of them together, though — and you can see why someone jumps to "virus."

The Scans, and What They Found

We ran the machine through a proper sequence of checks: a full offline scan with a trusted tool, a second opinion scan with Malwarebytes, and a manual look through the usual hiding places — browser extensions, scheduled tasks, the startup registry entries, temporary file folders. This is the kind of methodical process that matters, because malware does sometimes hide in places a quick scan won't reach.

Everything came back clean. No malware, no rootkits, no rogue extensions, nothing in the scheduled tasks that looked suspicious. The laptop was, as far as we could tell, completely uninfected.

So what on earth was going on?

The Real Culprits — All Three of Them

As it turned out, this was one of those cases where several unrelated issues had conspired to look like one dramatic problem. Once we dug in properly, here's what we actually found:

1. A browser session restore setting gone wrong. Chrome was set to "Continue where you left off" at startup. Margaret had left a sale tab and a news site open weeks ago, and Chrome was dutifully reopening them every single time — including, occasionally, after a short delay that made it look like they were opening by themselves rather than at boot.

2. A dodgy touchpad driver. The trackpad "drifting" had a mundane explanation: Windows had recently pushed an automatic driver update that didn't play nicely with the hardware on this particular model. The cursor wasn't being controlled by anything sinister — the driver was simply misreading palm contact near the edge of the trackpad. A rollback to the previous driver version fixed it immediately.

3. Notification spam from legitimate websites she'd said yes to. At some point — probably without realising — Margaret had clicked "Allow" on a push notification prompt from a couple of websites. Those sites were then legally (if obnoxiously) sending her browser notifications that appeared as pop-ups in the corner of the screen. Not malware. Just an aggressive but technically above-board advertising trick that far too many sites use.

The slowness and constant fan? That was a startup program pile-up — eight applications launching silently at boot, three of which she'd never knowingly installed (they'd piggy-backed on other software). Disabling the unnecessary ones, plus a long-overdue clear-out of temporary files, made a noticeable difference within minutes.

As for the "47 critical threats" from the free scanner? That tool was itself the problem — a well-known category of software called scareware, designed to frighten users into paying for a "fix" they don't need. The irony of downloading something genuinely untrustworthy while worrying about malware is not lost on us.

Why This Kind of Misdiagnosis Is So Common

Margaret is not unusual. We see variations of this scenario regularly. The human brain is very good at pattern-matching, and when several odd things happen at once, we reach for the most dramatic explanation available. "Virus" is the story that fits all the symptoms — even when it's wrong.

The problem is that acting on that assumption without proper diagnosis can cause real harm. People have wiped and reinstalled Windows to fix a dodgy driver. They've paid for unnecessary "security software." They've stopped using online banking on a perfectly safe machine. And occasionally — not in this case, but it happens — they've ignored something that was genuine malware because they'd already convinced themselves the problem was sorted.

Proper diagnosis means working through things methodically, not jumping to the most alarming conclusion first.

The Practical Takeaway

If your computer is behaving strangely, here are a few things worth knowing before you panic:

  • Browser tabs opening at startup are almost always a session restore setting, not a sign of infection — check Chrome or Edge's startup settings first
  • Pop-ups in the corner of your screen are often browser notification spam — go to your browser settings, find "Notifications," and revoke permission for any site you don't recognise
  • A drifting or erratic cursor is frequently a driver issue or a hardware fault, not malware
  • Anything that demands money to "remove threats" should be treated with deep suspicion — legitimate security tools don't work that way
  • Slowness and overheating are far more often caused by too many startup programs and a build-up of dust or temporary files than by anything malicious

Margaret left with a laptop that ran quietly, started cleanly, and had stopped doing anything alarming. The relief on her face was genuine. No data had been compromised. No bank details stolen. No virus. Just a handful of small, fixable problems that had ganged up on her at the same time.

Sometimes the most reassuring thing we can tell someone is: there's nothing to be frightened of. We just had to check properly first to be sure.