IT-Questions.com

8 guides

Security

Phishing, malware, lost devices, blocked USB sticks, and safe sharing of work data.

I think my computer has a virus

The PC is suddenly slow, pop-ups appear, or files look encrypted.

Call IT if neededAbout 8 minutes4 steps

You might notice

  • Unexpected toolbars or pop-ups
  • Files renamed or encrypted
  • Security software is turned off
  1. 01

    Disconnect from the network if files are being encrypted

    Unplug Ethernet, turn off Wi-Fi, and disconnect VPN. This slows spread to shares. Do not pay a ransom prompt.

  2. 02

    Do not install random “cleaner” tools

    Those sites often are the malware. Use only the company-approved antivirus already on the device.

  3. 03

    Run the official full scan

    Open the company security agent or Windows Security → Virus & threat protection → Full scan. Keep the PC on power.

  4. 04

    Write down what you clicked

    Note the email, USB stick, or website that started this. That is the most useful information you can give IT.

I clicked a suspicious link

You opened a questionable URL and need to limit the damage quickly.

Call IT if neededAbout 6 minutes4 steps

You might notice

  • A site asked for your password
  • A file downloaded on its own
  • The page looked like a sign-in screen
  1. 01

    Stop entering information

    Close the tab. Do not try the password “one more time” to see if it was real.

  2. 02

    If you typed your password, change it from a safe page

    Use a bookmark or type the company portal address yourself. Then update VPN, mail, and your phone so old passwords stop retrying.

  3. 03

    If a file downloaded, do not open it

    Delete it from Downloads. Do not enable macros. Run a quick scan with the company antivirus.

  4. 04

    Report the original message

    Use Report phishing on the email if that is how you got there. Tell IT the time and whether you entered a password or MFA code.

How to lock my computer

Protect your session when you stand up, even for a minute.

EasyAbout 1 minutes3 steps

You might notice

  • You are leaving your desk
  • A visitor is nearby
  • You use a shared or open office
  1. 01

    Lock immediately

    On Windows press Win+L. On a Mac press Control+Command+Q. The machine stays on; only the lock screen appears.

  2. 02

    Do not rely on the screensaver alone

    Idle lock helps, but it is not instant. Lock every time you leave the keyboard.

  3. 03

    Sign out on shared PCs

    On a conference-room or hot-desk machine, sign out so the next person does not land in your mailbox.

How to report a lost or stolen device

A company laptop, phone, or badge is missing and must be locked or wiped.

Call IT if neededAbout 5 minutes4 steps

You might notice

  • Laptop left in a car or taxi
  • Phone missing after travel
  • Badge is gone
  1. 01

    Call IT as soon as you notice

    Do not wait until Monday. Security can disable the account, revoke VPN, and wipe a managed device.

  2. 02

    Share the last known facts

    Asset tag if you know it, model, time last seen, whether it was signed in, and whether it had a PIN or biometrics.

  3. 03

    Change your password from another device

    Use a colleague’s machine or a phone browser on the official portal. This limits what a finder can do if the session was unlocked.

  4. 04

    Report a stolen badge separately

    Building security needs to deactivate badge access. IT cannot always do that for you.

A USB drive is blocked or I cannot copy files to it

Windows refuses a thumb drive, or files copy and then vanish because of policy.

ModerateAbout 6 minutes3 steps

You might notice

  • Access denied on removable media
  • Device is blocked by policy
  • Only company-encrypted sticks work
  1. 01

    Assume storage sticks are restricted

    Many companies allow USB keyboards and mice but block storage. That is intentional.

  2. 02

    Use an approved encrypted drive if you must

    If IT issues IronKey-style devices, use those and the official unlock app. Personal sticks are often denied.

  3. 03

    Prefer OneDrive links over copies

    Sharing a link keeps audit history and avoids lost sticks. For vendors, use the approved external-share process.

A website is blocked by the company firewall

The browser shows an access denied or category blocked page for a site you need.

EasyAbout 5 minutes4 steps

You might notice

  • Access denied by policy
  • The site works on your phone’s cellular data
  • Only one vendor site fails
  1. 01

    Read the block page

    It usually lists a category such as “uncategorized,” “file sharing,” or “newly registered.” That is what IT will review.

  2. 02

    Confirm you need it for work

    Personal shopping, streaming, and risky file hosts will stay blocked. A vendor documentation site is a reasonable request.

  3. 03

    Submit an unblock request

    Use the link on the block page or a ticket. Include the full URL, who asked you to use it, and whether it must be available off VPN too.

  4. 04

    Do not use a personal VPN to bypass it

    That violates policy and often breaks other work apps. Wait for the exception.

How to protect a sensitive file before sending it

Share payroll, HR, or customer data without dropping an unprotected copy into email.

ModerateAbout 6 minutes4 steps

You might notice

  • You need to send personal data
  • A policy tip blocked the mail
  • A vendor asked for an encrypted attachment
  1. 01

    Keep it in a controlled library

    Store the file in the approved SharePoint or Teams site, not on the desktop. Apply the sensitivity label your company provides, such as Confidential.

  2. 02

    Share a restricted link

    Grant specific people view access and set an expiration. Avoid “anyone with the link.”

  3. 03

    If email is required, follow the prompt

    Encrypt-only or Do not forward options in Outlook use company rights management. Do not invent a zip password and send the password in the same thread.

  4. 04

    Minimize the data

    Send the columns or pages that are needed, not the whole export. Delete local copies you no longer need.

Someone asked me for my password

A caller, chat, or email claims to be IT and wants your password or an MFA code.

EasyAbout 3 minutes4 steps

You might notice

  • A “help desk” chat asks you to read a code
  • A vendor wants your work login
  • A coworker asks to borrow your account
  1. 01

    Do not give it

    IT, finance, and vendors never need your password. Real IT can reset access without you reading it aloud.

  2. 02

    Do not approve an MFA prompt you did not start

    Deny it. An unexpected prompt means someone already has or is guessing your password.

  3. 03

    Hang up and use a known number

    Call the service desk using the number on the intranet or the back of your badge, not the number the caller gave you.

  4. 04

    Report the attempt

    Send security the chat, email, or callback number. These attempts are often part of a wider campaign.