Save open work and back up important files. Use instructions for your exact device and software version. If Windows cannot start, see the startup guide.
Work through these checks
0 of 4 complete01Disable Microsoft Office macros by default via Group Policy
- Disable Microsoft Office macros by default via Group Policy
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
02Run a complete offline security scan using Microsoft Defender
- Run a complete offline security scan using Microsoft Defender
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
03Isolate infected machines from the local network
- Isolate infected machines from the local network
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
04Implement email protection rules (DMARC, SPF, DKIM)
- Implement email protection rules (DMARC, SPF, DKIM)
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
Possible causes
- Opening malicious email links or attachments with enabled macros
- Weak administrative passwords enabling lateral network brute-force attacks
- Lack of email spam filtering and macro execution restrictions
Was this helpful?
Your progress is saved on this device.