Virus Scan

Use this when the user wants a security-first pass focused on malware signals and suspicious persistence.

Check

• antivirus or endpoint protection status
• firewall status
• suspicious processes
• unusual autoruns or persistence
• risky permissions
• obvious unwanted software

Rules

• Be evidence-based and skeptical
• Do not claim a machine is clean unless the available evidence actually supports that
• Do not delete, quarantine, disable, or uninstall anything without approval
• If confidence is limited, say so plainly