To stop fake virus pop-ups on Windows 11, close the suspicious browser page, block unwanted website notifications, and check your PC through the real Windows Security app. Don't call the number in the warning or install the cleaner it recommends.
A loud alert saying your computer is infected can be pretty convincing. That's the point. Some warnings come from deceptive websites, while others are notifications a site was allowed to send. The message itself doesn't prove your PC has a virus.
Here's how to work out what's happening and deal with it without letting the pop-up make decisions for you.
Close the warning without following its instructions
Start with the browser window. Don't use a repair button inside the page, even if it looks official.
- Try closing the suspicious tab using the browser's own tab controls.
- If the page is making that difficult, press Alt + F4 to close the active browser window.
- If Microsoft Edge won't respond, right-click Start and open Task Manager. Under Processes, find Microsoft Edge in Apps, right-click it, and choose End task.
Ending the browser can discard unsaved work in its tabs, so use that last option when the window won't close normally.
A warning that demands a call to a support number is a serious red flag. Microsoft says its genuine error and warning messages don't include a phone number to call.
Once the page is closed, work through the next checks from settings you open yourself.
Stop the website notifications
A pop-up inside a browser and a notification in the corner of your desktop are different things.
A website with notification permission can send messages through your browser. In Edge, those messages can even appear while the browser is closed. That can make a website's alert look much more like a Windows warning than it really is.
Look for the website or browser named on the notification. Then block the site's permission through your browser settings. You don't need to visit the suspicious site again.
If you use Microsoft Edge:
- Open Edge's Settings and more menu, then choose Settings.
- Open Privacy, search, and services.
- Select Site permissions, then All sites.
- Choose the unwanted website.
- Find Notifications and select Block.
If you use Google Chrome:
- Open Chrome's three-dot menu and choose Settings.
- Open Privacy and security, then Site settings.
- Select Notifications.
- Next to Not allowed to send notifications, select Add.
- Enter the unwanted website's address and select Add.
Browser labels can vary between versions. On a work or school computer, your organization may control these settings.
Blocking a site's notifications stops that permission. It doesn't tell you whether a downloaded file is safe, and a malware scan won't necessarily revoke notification permission for you. Treat those as separate jobs.
If you're getting new browser windows rather than desktop notifications, check Pop-ups and redirects in your browser's site permissions as well. Pop-up blocking and notification blocking are separate settings.
Run a check through the real Windows Security app
Open your security tools yourself instead of trusting a button in the warning.
- Open Start, type Windows Security, and launch the app.
- Select Virus & threat protection.
- Select Protection updates, then choose Check for updates.
- Return to Virus & threat protection and select Quick scan.
If you've installed something suspicious or want a broader check, open Scan options, choose Full scan, and select Scan now. A full scan checks files and programs, so leave time for it to finish.
Review any findings in Protection history and follow the security app's recommended actions.
If another antivirus product is managing your PC, Windows may show that provider instead. Use its official app and instructions. You don't need to remove your existing antivirus just to make these steps match.
And keep this distinction in mind: a scam notification can continue even when a scan finds no threats, because its website permission is still allowed. Go back and check the browser permission if the same site's alerts keep returning.
Make the next fake warning easier to avoid
Microsoft Edge includes a scareware blocker designed to spot deceptive full-screen warnings. It's worth checking whether it's enabled:
- Open Edge Settings.
- Select Privacy, search, and services, then Security.
- Turn on Scareware blocker if it's available and switched off.
Availability and default settings depend on your device. The feature is an extra layer of protection, not a reason to trust every page that gets through.
For notification requests, allow only sites you actually want updates from. A page telling you to press Allow before you can watch a video or continue reading deserves a pause.
The same goes for urgent instructions to download a fix. Close the message and open the relevant app or official settings yourself.
If you already installed something or shared information
There's a difference between seeing an alarming page and giving someone access to your computer.
If a caller persuaded you to install a remote-access app, end that session. Remove software they told you to install, run a full security scan, and check Windows Update for available security updates.
If someone had control of the PC or problems keep coming back, get help from a trusted technician or your organization's IT team. Microsoft says a device reset may be worth considering after remote access. Plan that recovery carefully because resetting can affect apps, settings, and files.
If you shared a password, use another trusted device to start the account provider's official recovery process promptly. Change that password and any reused copies, then sign out other sessions. If the affected PC may be infected, avoid entering replacement passwords on it until it's been checked and cleaned. Don't type new credentials into the suspicious page.
If you paid the caller, contact your card provider through its official app or a number you already trust. Explain what happened and ask about the next steps.
You don't have to figure out a serious incident from one scary message.
A little help with the next confusing message
The useful habit is simple: close the suspicious page, check its notification permission, and open your actual security app. Those checks give you something more useful than a dramatic warning.
If you'd like help understanding unfamiliar Windows messages, FixKon's AI assistant can use what's on your screen as context. Its free manual PC toolkit also includes a Security tool backed by Windows Defender. You can explore what it does at https://www.fixkon.com/.
Use an assistant to help understand the message, then check actual detections in your security app.
For a hand with everyday PC questions and maintenance, download and install FixKon for Windows: https://www.fixkon.com/download.
Top comments (0)