Home · Business · IT, Data & Security · Helpdesk & devices

NO

As of 13 August 2026, AI cannot remove malware from a business laptop.

This still needs a person who signs their name to it.

Can you do it?

5 minutesto a draft.

n/ait cannot be self-verified.

Cost, all in£0

Skill neededchat-fluent

Who has to check ita professional

What the alternative costsThe alternative is your organisation's IT or security team; no price is stated here.

If this goes wrong: the laptop appears clean while an attacker remains present, and the business can lose data, access or evidence needed for investigation.

What to actually do

  1. Hand it to a person

    The route this page recommends

    Someone with a licence or accountable authority has to sign this before it counts.

  2. Use a tool built for this

    Second choice

  3. Do it yourself

    The distant third

    A chat interface gets you a draft, but you cannot verify it yourself. That is the catch.

    How to actually do it

    1. Disconnect the laptop from Wi-Fi, Ethernet, Bluetooth and removable storage without shutting it down if your organisation's incident policy says to preserve evidence, then contact your IT or security team using the approved channel.
    2. Open the security alert, helpdesk ticket or email that reported the problem and copy its wording into the prompt after removing passwords, tokens, customer data and other secrets.
    3. Gather the laptop's operating system, asset identifier, user, symptoms, first known time of the problem and any recent downloads, links or USB devices, then add only those details to the prompt.
    4. Ask the chatbot for a containment and escalation plan, and send the plan to the authorised IT or security team rather than running unfamiliar commands yourself.
    5. Have the authorised team collect the relevant endpoint and account evidence, run the organisation's approved security scan and check whether other devices or accounts show related activity.
    6. Ask the authorised team to decide between cleaning, restoring from a trusted backup or reimaging the laptop, then change affected credentials and revoke sessions if their investigation indicates possible compromise.
    7. Before reconnecting the laptop, have the authorised team compare the scan and investigation results with the organisation's clean-device criteria and record who approved the return to service.

    Prompt

    I need to respond to suspected malware on a business laptop. Act as a cautious IT incident-triage assistant, not as a replacement for our IT or security team. Give me a safe, ordered plan for containment, evidence preservation, approved scanning, recovery and escalation. Do not tell me to delete files, disable security controls, edit the registry, run destructive commands or reconnect the laptop to the business network without authorisation. Ask only for information that is safe to provide and do not request passwords, personal data or confidential business content. Clearly separate actions suitable for a normal employee from actions that must be done by an authorised IT or security professional. State what evidence would be needed before declaring the device clean, and say when the laptop should be isolated, reimaged or investigated for account and data compromise. Use these details: operating system: [Windows or macOS]; organisation policy or helpdesk contact: [details]; security alert or message: [paste text without secrets]; symptoms: [describe]; when it started: [date and time]; recent downloads, links or USB devices: [details].

    Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.

What it gets wrong

  • AI cannot inspect the laptop's processes, files, network connections, security telemetry or persistence mechanisms by itself.
  • AI cannot distinguish a false positive from an active compromise without trustworthy endpoint evidence.
  • AI cannot prove that malware has been removed or that business data and credentials were not copied.
  • AI cannot authorise isolation, reimaging, credential resets or reconnection to your company's network.
  • AI cannot preserve the forensic evidence needed to investigate an incident or meet your organisation's reporting duties.

What makes this a NO: verification cost, legal accountability and stakes of error.

How we scored this

Five axes, each scored nought to two by hand: ten means AI carries the task cleanly, and the thresholds that turn a total into YES, PARTLY or NO are published in the methodology. Each axis name links to its definition.

AxisScore (0–2)
Output1
Inputs1
Verification0
Liability0
Effort delta1
Total3 / 10

The methodology and its thresholds are published in full.

FAQ

Can ChatGPT remove malware from my work laptop?
No. A chatbot can help you organise safe containment and escalation steps, but it cannot inspect the laptop or prove that an infection is gone. Isolate the device under your company's policy and contact your IT or security team.
Should I shut down a business laptop with malware?
Follow your organisation's incident policy and ask IT or security before taking action, because shutting down can affect evidence. Disconnecting the device from networks may be appropriate, but do not run unfamiliar cleanup commands or delete files.
Can antivirus remove malware from a work computer?
An approved endpoint security tool may detect and remove some malware, but a clean scan does not by itself rule out persistence, stolen credentials or wider compromise. Your IT or security team should decide how to investigate, recover and reconnect the laptop.
What should I do if I think my work laptop has a virus?
Stop using it for business activity, isolate it as your incident policy requires and report it to your IT or security team. Do not enter passwords, connect other devices or delete suspicious files until they tell you what to do.

Nearby answers

All Helpdesk & devices rulings

Assessed by gpt-5.6-luna (gpt-5.6-luna) on 2026-08-13, second-checked by an independent model. Wrong somewhere? Email [email protected] and it gets re-checked.

The newsletter

AI news, new answers and product picks, straight to your inbox.