Browser
Extensions you never installed, a swapped default search engine, notification permissions that sites abuse to show fake alerts, and altered proxy settings. Most of what people call “a virus” lives here.
Imagine a freelance translator in Koper who does everything on one laptop. Orders come in by email, invoices go out from Minimax, and in the evening her two children borrow the machine for games and install add-ons promising “extra lives”. One morning a red panel fills the browser, insisting the system is infected and offering a number for instant help. The fan roars even with nothing but a word processor open. Two days later a client in Trieste asks why she sent him a link to an “overdue invoice”. Speed is now the smallest worry. Anyone holding her mailbox password can send clients fake invoices with a changed IBAN, signed with her name. We handle cases like this in a fixed order: understand what is happening, protect the data, clean only after that, and finally remove the root cause, which is most often a pirated program or a browser extension. The session is remote. The person at the computer starts it, watches each click we make and can disconnect at any moment. We help businesses as well as private individuals with a home PC.
We work through the machine layer by layer, from what you can see on screen to what is buried underneath. Each layer has its own checklist, so nothing is left to guesswork.
Extensions you never installed, a swapped default search engine, notification permissions that sites abuse to show fake alerts, and altered proxy settings. Most of what people call “a virus” lives here.
If someone has already talked a user into installing AnyDesk, TeamViewer or a similar tool, we track it down, remove it and look for any other way back in the scammer may have left, such as a new local user.
Programs that launch at sign-in, scheduled tasks and services nobody needs. We time the boot before and after, so the improvement shows up as a number rather than a feeling.
Disk health, memory pressure and temperatures. If the real issue is a worn-out drive or too little RAM, we tell you straight away instead of billing hours of cleaning that would not help.
Forwarding rules an attacker has hidden in Outlook or Gmail, unknown active sessions and apps with rights to the mailbox. We also help draft a short warning to clients not to pay invoices showing a new IBAN.
If files have been encrypted, the machine is cut off from the network at once but kept powered on, and shared folders are checked. For businesses we help decide whether the personal data breach must be notified to the Information Commissioner within 72 hours and prepare an incident report for SI-CERT.
Businesses without a contract are charged €50 per hour plus VAT. Private clients pay from €35 incl. VAT for a remote session, with each extra hour at €45 incl. VAT.
Tell us which device it is and what is happening. If you suspect a break-in, switch off Wi-Fi but keep the PC running, as powering down can wipe useful traces.
We send a link that you open yourself. Your documents are copied to a safe place first, and then we diagnose.
If reinstalling Windows would be quicker than cleaning, we say so and estimate the time for each option. The choice is yours.
Updates go on, folder protection against ransomware is enabled and a standard user account is set up for daily work. You get a summary of what we found and changed.
Most infections we see begin with a “cracked” program. A free copy of paid PDF, video or photo software from an unknown website is the most common route in for password-stealing malware. Cleaning without removing that source only buys time. Once the pirated software is gone, we suggest a legitimate, affordable replacement, often a free open source one, so the same story does not repeat a month later.
Reputable vendors never show warnings of that kind. If you let the caller connect, treat the computer as accessed: unplug it from the network, type no passwords on it and contact your bank immediately. Then email support@apply.si and we will find and remove whatever the caller left behind.
Antivirus catches a lot, but not everything. A browser extension you approved yourself, or a program installed with admin rights, often counts as “allowed”. That is why, besides scanning, we review the settings antivirus does not police.
If the certificate sat on the infected machine without password protection, it may have been copied. We recommend contacting the issuer, for example SIGEN-CA or Halcom, about revoking it and getting a new one. We can help you install the replacement.
Say no. Apply never phones or writes unprompted asking for remote access. A session begins only at your request and with your approval. Please report suspicious approaches to support@apply.si.
Email support@apply.si with a description of the problem. We offer a slot within working hours, Monday to Friday, 9:00-17:00. The session, from €35 incl. VAT, is paid upfront by card through a link we email to you.
How many devices are affected, what are the symptoms and when did they start? Within one working day we will propose a time for a remote session.
Enquiry received
An engineer will write back no later than the following working day. Faults that leave your staff unable to work are always looked at first.
No town by that name here. Check the letters, or settle for the nearest larger place. Our engineers work only over the internet, so Kočevje and Koper get precisely the same treatment.