Crisp PhaseHelp with antivirus questions

A question-and-fix resource for Australia

Answers to the antivirus and online safety questions people in Australia actually ask

Crisp Phase takes the questions that come up again and again about antivirus software, strange pop-ups, suspicious messages and sluggish computers, and answers each one the same way: the short answer first, then the likely causes, then the things you can try that cost nothing, then where to get official help, and only then whether a paid product is relevant at all.

How this site is paid for. Crisp Phase carries paid affiliate links. One of the products described in these answers is Norton AntiVirus Plus, and the link to it is an affiliate link: if you buy a subscription after following that link, the affiliate network that operates the link pays ORYNA s.r.o. a commission. You pay the same amount you would pay going direct.

The commission has no bearing on which questions are answered or on what the answers say. Free steps are listed before paid ones on every page, and several answers conclude that no purchase is called for. Full detail is on the affiliate disclosure page.

Five questions, answered in a sentence each

Most people arrive with one specific worry and want it settled quickly. These are the five that come up most often, each with the shortest honest answer. The topic pages carry the longer version, including what to do when the short answer does not apply to your situation.

Short answer

A slow computer is rarely a sign of infection. Full disk, too many programs launching at start-up, an overdue update or an ageing mechanical drive explain the large majority of cases. Work through the free checks before you assume anything malicious. Read the longer answer.

Short answer

Opening a link is not the same as losing an account. Harm usually requires a further step: typing a password, approving a verification code or installing something. If you took one of those steps, changing the password on that account is the first move, not a scan. Read the longer answer.

Short answer

A changed homepage or a new toolbar usually arrived with something you installed on purpose. Bundled extras are the common cause. Removing the extension and resetting browser settings is free and takes a few minutes. Read the longer answer.

Short answer

Reusing one password across accounts is the single habit that causes the most damage. When a company you signed up to is breached, that password is tried everywhere else. Unique passwords and two-factor authentication matter more than any product you can buy. Read the longer answer.

Short answer

Nothing in Australian law requires you to buy security software. Windows and macOS both ship with protection switched on. A paid product is a choice about extra features and support, not a legal duty. Read the longer answer.

Every question on this site, by topic

The five topic pages below each gather a group of related questions around one situation. You do not need to read them in order. If your question is not here, the Australian Signals Directorate publishes free guidance for individuals and families at cyber.gov.au, and that is the better place to start for anything this site does not cover.

My computer has slowed down

Why a machine gets slower over time, how to tell ordinary ageing apart from something worse, what the start-up list and disk space have to do with it, whether two security programs can fight each other, and when a slow computer really is worth having looked at.

I clicked a link I should not have

What actually happens when a link opens, which steps matter in the first ten minutes, how to recognise a delivery or bank text that is not genuine, what to do if you entered card details, and where in Australia these things get reported.

Pop-ups, new toolbars and settings that changed on their own

Why search engines and homepages change without being asked, how browser notifications turn into a stream of alarming messages, what the full-screen page claiming your computer has a problem really is, and how to put a browser back the way it was.

Accounts, passwords and logins

How to tell whether a password has been exposed, what two-factor authentication does and does not protect, whether saving passwords in a browser is sensible, and the order to work in when an account has been taken over.

Choosing and paying for security software

What the built-in protection on Windows and macOS already does, what paid subscriptions add, how to compare them without reading marketing copy, what happens when a subscription lapses, and the situations where buying nothing is the correct answer.

Symptom, likely cause, and where to look first

This table matches common complaints to the explanation that is most often correct, and points to the page that covers it. It is a starting point rather than a diagnosis — the same symptom can have several causes, and the topic pages set out how to tell them apart.

Common symptoms and the explanation that most often turns out to be right.
What you noticeMost often caused byWhere it is covered
Everything takes longer than it used toDisk close to full, or a drive nearing the end of its working lifeSlow computer
The machine takes several minutes to become usable after switching onPrograms added to the start-up list by their own installersSlow computer
The fan runs constantly and the case is hotDust, a blocked vent, or one program using the processor heavilySlow computer
Search results open in an engine you did not chooseA browser extension installed alongside something elseBrowser changes
Alerts appear even when the browser is closedWebsite notification permission granted at some earlier pointBrowser changes
A text message about an undelivered parcelA bulk message sent to many numbers at onceSuspicious links
Login attempts on an account you have not used for yearsA password reused from a service that was breachedAccounts and passwords

The free steps worth taking before you spend anything

These apply to almost every situation described on this site, and none of them costs money. Working through them first is also the only way to know whether a paid product would make any difference to your particular problem.

  1. Install the operating system updates you have been postponing. A large share of the security problems people run into are fixed by an update that was already available.
  2. Check that the protection already on your machine is switched on. Windows ships with Microsoft Defender Antivirus enabled by default; macOS has its own built-in protections. Neither needs buying.
  3. Look at what starts automatically when the computer does. Removing programs you no longer use from that list is the single most effective free fix for a slow start-up.
  4. Make sure something, somewhere, holds a copy of your files. A backup is what turns a serious incident into an inconvenience, and it is the one step no security subscription can do for you.
  5. Give your main email account a unique password and turn on two-factor authentication. Email is the recovery route for everything else, which makes it the account worth protecting first.

About the order of these steps

They are deliberately sequenced from the cheapest and least disruptive to the most involved. If a step does not apply to you, skip it. Nothing here depends on buying anything, and none of it stops working if you later decide to subscribe to a paid product.

When the problem is not the software at all

A surprising number of questions that arrive phrased as security questions turn out to have hardware or account explanations. A laptop that was fast in 2019 and is slow now may simply be running a modern operating system on a drive designed for a lighter one. A phone that drains its battery after an update is usually re-indexing, not infected. A bank account with an unexplained charge is far more likely to be a subscription you forgot than anything that touched your computer.

This matters because the wrong diagnosis leads to wasted effort and, sometimes, wasted money. A security subscription will not add storage, replace a failing drive, or recover an account whose password is known to someone else. Each topic page says plainly where that boundary lies.

Where a paid product such as Norton AntiVirus Plus fits

Norton AntiVirus Plus is a paid security subscription for Windows and macOS computers. It is one of several products in the same category, and it is the one Crisp Phase has a commercial relationship with, which is why it is named rather than left vague. Paid products of this kind typically bundle their detection engine with extras — a firewall, a password manager, backup space — and with a support channel you can contact when something goes wrong.

They do not, however, change the shape of the problems described on this site. A subscription will not undo a password you typed into a convincing imitation of a bank login page; changing that password will. It will not free up a disk that is full. It will not stop a browser notification stream you agreed to; withdrawing that permission will. Buying software is a reasonable choice when you want a single product covering several machines with support attached, and an unnecessary one when the built-in protection and a few free habits already cover how you use your computer.

Visit the Norton AntiVirus Plus website to read the vendor's own description of what the subscription includes and what it costs in Australian dollars.

Paid affiliate link. ORYNA s.r.o. is paid a commission on sales made through it. The price you pay is unchanged.

Reporting a scam or harmful content in Australia

Reporting rarely gets an individual's money back, and it is worth saying so rather than implying otherwise. What it does is feed the pattern-matching that lets these bodies warn others and act against the operations behind it. The organisations below each cover a different kind of problem.

Australian bodies and the kind of report each one takes.
OrganisationWhat it is
Australian Cyber Security CentreThe Australian Signals Directorate's cyber security arm. It publishes free advice for individuals and small businesses, and runs ReportCyber for reporting cybercrime.
ScamwatchRun by the National Anti-Scam Centre, it collects reports of scams and publishes information about current ones.
eSafety CommissionerAustralia's regulator for online safety, with complaint schemes covering cyberbullying, image-based abuse and seriously harmful online content.
Office of the Australian Information CommissionerThe national privacy regulator. It handles privacy complaints and administers the Notifiable Data Breaches scheme.
Australian Competition and Consumer CommissionEnforces the Australian Consumer Law, including the rules on misleading and deceptive conduct that apply to anyone selling or advertising in Australia.

Terms you will meet in these answers

Security writing is full of words used loosely. These are the ones that appear on this site, with the meaning intended here.

Malware
An umbrella word for software written to do something the person running it would not agree to. Viruses, ransomware and spyware are all kinds of malware.
Phishing
A message designed to get you to hand over a password, a code or payment details by imitating an organisation you trust.
Potentially unwanted program
Software that is not strictly malicious but installs alongside something else and changes settings you did not intend to change. Most toolbars and search redirectors fall here.
Two-factor authentication
A second check beyond the password, usually a code from an app or a prompt on a device you own. Often shortened to 2FA.
Real-time protection
The part of a security product that inspects files as they are opened or downloaded, rather than only when you run a scan.
Definitions
The reference data a security product uses to recognise known threats. Modern products update these quietly in the background.

How these answers are written and checked

Questions are chosen from the phrasings people actually use when they search, grouped so that related worries sit together rather than being scattered across pages. Each answer is checked against the published guidance of the relevant official body — most often the Australian Cyber Security Centre, Scamwatch or the vendor's own documentation — and where a factual claim depends on a source, that source is linked so you can read it yourself rather than taking this site's word for it.

The site does not run tests, benchmarks or comparisons of its own, and it does not publish scores or rankings. Where a paid product is mentioned, it is a product ORYNA s.r.o. has a commercial relationship with, and that is stated on every page where the link appears. The About page sets out the method in more detail, including how often pages are revisited.

A few more questions