ensure your secure boot is enabled in bios, and in windows you do the hardware DEP for all software and set all exploit protection on and enable core isolation and memory integrity. If your OS had a virus thats ruining it you may need to bios secure erase wipe the drives before you can reinstall with it gone.