Fake Microsoft Virus Alert Pop-Up (Browser Scam)

Summary

Some users may encounter a pop-up claiming that Microsoft Windows is infected and instructing them to call a phone number for “Microsoft Support.”
This message is not legitimate. It is a browser-based scam designed to frighten users into calling a fake support line.

These pop-ups do not mean your device is infected.


What This Is

  • A fake security alert displayed through a web browser
  • Commonly triggered by malicious ads or unsafe websites
  • Often uses Microsoft logos, Windows Defender language, and urgent warnings
  • May lock the browser window or play an alarm sound

Microsoft will never:

  • Display phone numbers in security alerts
  • Ask you to call for virus removal
  • Lock your device through a browser window

What You Should NOT Do

  • Do not call the phone number shown
  • Do not click “Continue,” “Allow,” or similar buttons
  • Do not enter passwords or personal information
  • Do not install software suggested by the pop-up

How to Fix It (Quick Steps)

Step 1: Close the Browser

If possible:

  • Click the X on the browser window

If the window will not close:

  • Windows: Press Ctrl + Alt + Delete → Task Manager → End Task on the browser
  • Mac: Press Command + Option + Escape → Force Quit the browser

Step 2: Reopen the Browser Safely

  • Reopen the browser
  • If prompted to restore tabs, choose NO

Step 3: Clear Browser Data

Clear cache and site data for your browser:

  • Edge / Chrome / Firefox:

    • Settings → Privacy → Clear browsing data
    • Clear cached images/files and site data


Step 4: Remove Browser Notification Permissions

Some scam sites trick users into allowing browser notifications, which causes repeated fake virus alerts even after the page is closed.

To fix this:

  • Open your browser Settings
  • Go to Privacy & SecuritySite SettingsNotifications
  • Review the list of sites allowed to send notifications
  • Remove or block any site you do not recognize
  • Close and reopen the browser

Removing unwanted notification permissions usually stops these messages from returning.


Step 5: Run a Security Scan

  • Make sure the device is connected to the internet
  • Run a full scan using the district-provided security software or Microsoft Defender

If the Message Keeps Returning

Contact the IT Department if:

  • The pop-up appears repeatedly
  • The browser continues redirecting automatically
  • You clicked any buttons or entered information

IT may:

  • Remove malicious browser extensions
  • Reset the browser profile
  • Check for adware or unwanted software

If You Already Called the Number

If you contacted the number or allowed someone remote access:

  1. Disconnect the device from the network immediately
  2. Contact the IT Department right away
  3. Do not use the device until IT confirms it is safe

Key Takeaway

This is a scare tactic, not a real virus alert.
Closing the browser and clearing data resolves the issue in most cases.

If you are unsure, stop and contact IT. That is always the safest option.