A full-screen warning suddenly takes over your browser, blares an alarm, and insists your computer is infected with a virus that only Microsoft can fix if you call the number on the screen. The page will not close, your cursor feels trapped, and the message looks official enough to make your stomach drop.
Take a breath, because this is not Microsoft and your PC is not actually locked. What you are looking at is a tech support scam, and you can shut it down and clean up after it without calling anyone or paying a cent.
Why the "Microsoft" Virus Alert Is a Scam, Not a Real Warning
The single most useful fact here is also the easiest to check: genuine Microsoft error messages never include a phone number to call. Never call a number provided in an error message, and do not click links or provide personal information in response to the pop-up.
If a window fills your screen, claims to be a "virus alert" from Microsoft, and pressures you to dial a support line, that combination alone identifies it as a tech support scam. A genuine Windows security notice will never beg you to call someone.
It also helps to know how Microsoft actually operates. Microsoft will never proactively reach out to you to provide unsolicited PC or technical support. A pop-up claiming to be from Microsoft and asking you to call a number to fix your computer is a scam.
The Screen Is Not Locked: Your Browser Is Playing a Trick
The reason the alert feels so convincing is that it appears to lock your entire machine. It does not. Scammers can put your browser on full screen and display pop-up messages that won't go away, essentially locking your browser.
That distinction is your way out. A browser window forced into a sticky full-screen state can make the whole PC seem locked. Once you understand that closing the browser stops the pop-up, you can move on to checking for malware and cleaning up anything the scammers had you install.
Close the Hijacked Browser Window
Your first move is to shut the browser, and you do not need your mouse to do it. If your screen suddenly fills with scary pop-ups, try pressing Alt + F4 to close your browser. If you can't close your browser, try restarting your computer.
Press Alt + F4 to close the active window. This can shut the browser even when the page has hijacked your cursor.
If Alt + F4 does not work, restart your computer. A restart closes the browser, but reopening saved tabs can bring the scam page back.
When the browser reopens, decline any prompt that offers to restore the previous tabs, since that would simply reload the scam page.
Force the Browser to Quit With Task Manager
If the window refuses to close and a restart is not convenient, end the browser process directly. Task Manager can close it for you.
Press Ctrl + Shift + Esc to open Task Manager.
Select Processes in the left section menu, then find your browser under Apps and right-click it.
Choose End task to force the browser shut.
If that still does not work, restart the PC.
End task closes the browser instantly without saving anything, which is exactly what you want when a page is holding it hostage.
What Never to Do While the Scam Is Active
Closing the window solves the immediate problem, but the people behind these pop-ups count on panic. Hold the line on a few non-negotiable rules.
Do not call the number shown. Do not let anyone connect to your PC.
Scammers ask you to install apps that hand them remote access, then demand a one-time fee or a subscription. Do not pay them, and be especially wary of any request for payment by cryptocurrency or gift cards, because Microsoft will never ask for either.
Remember the underlying truth: Microsoft will never proactively contact you to provide unsolicited PC or technical support. A surprise pop-up demanding money or remote access is the opposite of how legitimate support works.
Undo Anything the Scammer Talked You Into Installing
If you already followed some of the scammer's instructions before realizing what was happening, you need to reverse them. Uninstall applications that scammers asked you to install, and consider resetting the device to a factory state in more serious cases.
Go through your installed programs and remove any remote-access or "support" software the caller directed you to add.
A factory reset is a heavier step that wipes everything on the device, so treat it as a last resort and only after you have backed up anything important.
Scan With Microsoft Defender Antivirus
Once the browser is closed and any rogue apps are gone, scan for malware. Run a full scan with Microsoft Defender Antivirus to remove any malware. Apply all security updates as soon as they're available. The Windows Security app is built into Windows 10 and Windows 11, so there is nothing to download.
- 1.Open the Windows Security app.
- 2.Select Virus & threat protection.
- 3.Choose Scan options.
- 4.Pick Full scan, then select Scan now.
A full scan checks every file on the drive, so it takes longer than a quick scan but does a more thorough job of catching support-scam malware.
Run a Microsoft Defender Offline Scan for Stubborn Malware
Some malware hides while Windows is running. For a deeper sweep, run a Microsoft Defender Offline scan, which scans in the Windows Recovery Environment without loading Windows, making persistent malware harder to hide. Open Windows Security, select Virus & threat protection, and choose Scan options. Select Microsoft Defender Antivirus (offline scan), then select Scan now.
Save any open work first, because this scan restarts your PC.
Open the Windows Security app and select Virus & threat protection.
Choose Scan options.
Select the radio button for Microsoft Defender Antivirus (offline scan), then select Scan now.
The offline scan takes about 15 minutes and reboots the machine while it runs. Two requirements apply: you must be signed in with local administrator privileges, and Windows Recovery Environment (WinRE) must be enabled. You can confirm WinRE status with reagentc /info and turn it on if needed with reagentc /enable.
If you prefer the command line, the PowerShell cmdlet Start-MpWDOScan launches the same offline scan and triggers the restart. Whichever method you use, you can review what it found afterward by opening Windows Security and selecting Protection history.
Secure Your Accounts and Watch for Suspicious Activity
If you gave the scammers any access, treat your passwords as exposed. Change passwords and monitor unusual sign-in activity.
Run a full antivirus scan before changing your passwords. Then change your important passwords, starting with your Microsoft account, and do it from a device you trust to be clean rather than the PC that may still be compromised. For your Microsoft account, also check connected accounts, forwarding, and automatic replies.
After that, keep an eye on your accounts for unfamiliar sign-ins or activity you do not recognize, and act quickly if anything looks off.
If You Paid, Call Your Bank and Then Report the Scam
Money sent to these operators can sometimes be recovered if you move fast. Contact your bank or other financial institutions if you paid them. Reach out as soon as possible so they can flag or reverse the charge.
After you have protected your money and your accounts, report the scam so Microsoft can act on it. You can report tech support scams at www.microsoft.com/reportascam. Reporting helps Microsoft shut down the operations behind these pop-ups.
Frequently Asked Questions
Is the Microsoft virus alert pop-up real?
No. It is a tech support scam. Genuine Microsoft error messages never include a phone number to call, so any pop-up claiming to be a Microsoft virus alert that tells you to call a number is fake.
The pop-up locked my whole computer. Is my PC infected?
Your PC is almost certainly not locked. Scammers put the browser into full screen and display pop-ups that will not go away, which only locks the browser. Try closing the browser with Alt + F4, or open Task Manager with Ctrl + Shift + Esc and use End task to close it. Then scan for malware.
Do I need to download special software to remove it?
No. The Windows Security app is built into Windows 10 and Windows 11. Run a Full scan, and if you want a deeper check, run a Microsoft Defender Offline scan through Virus & threat protection > Scan options. No separate download is required.
I already called the number and let them connect. What now?
Uninstall any apps the scammers had you install, run a full Microsoft Defender Antivirus scan and an offline scan, then change your passwords from a clean device and monitor your accounts for unusual sign-ins. If you paid them, contact your bank or financial institution right away.
How do I report the scam to Microsoft?
Report tech support scams at www.microsoft.com/reportascam so Microsoft can take action against the pages spreading the pop-up.