How do I remove a persistent fake-virus alert popup?

Most persistent fake-virus alerts on Windows 11 are either:

• A malicious or deceptive website stuck in the browser, or
• Deceptive/rogue software or a tech-support-scam component installed on the PC.

Use these steps to remove them.

1. Close the fake alert

• If the alert is in a browser tab and won’t close normally:
  • Press Ctrl + Shift + Esc to open Task Manager.
  • Select the web browser process (for example, Microsoft Edge, Chrome, Firefox) and choose End task.
  • If needed, repeat until the browser is fully closed.
• If the screen appears “locked” by a full-screen web page, this is a common tech-support scam. Real Windows errors do not show phone numbers or ask to call support.

2. Clear the browser’s data Fake alerts often come back via cached pages or scripts.

• Open the browser again.
• Clear browsing data (cache and cookies). For Edge, see the guidance in the Q&A example that recommends clearing cache after closing the scam page.

3. Remove deceptive or rogue software (if installed) If pop-ups appear even when the browser is closed, there may be deceptive software installed.

First, try normal uninstall:

• Open Settings > Apps > Installed apps and uninstall any unknown or recently added suspicious programs.

If the program is not listed, use the built‑in remover:

1. Open Start > Computer (File Explorer).
2. Browse to:
   • C:\Program Files
   • C:\Program Files (x86) (on 64-bit systems)
3. Look for a folder with the name of the suspicious program.
4. Open that folder and run its uninstall file (for example, Uninst.exe, Uninstall, or Uninstall <Program_Name>), then follow the prompts.
5. Do not delete the program folder manually if there is no uninstall file, as this can adversely affect Windows or other programs.
6. Scan for malware and deceptive software

• Run a full scan with Windows Security (Virus & threat protection).
• Optionally, use Microsoft’s tools mentioned in the malware guidance:
  • Microsoft Safety Scanner to detect and remove common malware issues.
  • Windows Defender Offline to detect and remove malicious and potentially unwanted software, including rootkits.

5. If it was a tech-support scam If the fake alert tried to make contact by phone or asked to install tools or give remote access, follow these protections:
6. Uninstall any applications scammers asked to install.
7. If remote access was granted or the system behaves suspiciously, consider using Windows recovery options to reset the device.
8. Run a full scan with Windows Security.
9. Apply all Windows Update security updates.
10. Change passwords and contact financial institutions if any payment or card details were shared.
11. Prevent future fake alerts

• Avoid downloading software, videos, or music from dubious sites, as malicious ads there often trigger fake alerts.
• Be aware that:
  • Fake tech-support or fake antivirus pages may use full-screen mode, disable Task Manager, show continuous pop-ups, or play audio messages.
  • Real Windows error messages never ask to call a phone number.

If the pop-ups continue after all of the above, treat the system as potentially compromised and consider a full reset using Windows recovery options.

References:

• Microsoft resources and guidance for removal of malware and viruses
• Unexplained Windows or software behavior may be caused by deceptive software
• Protect yourself from tech support scams
• possible virus, computer locked - Microsoft Q&A
• Microsoft Defender Scam or Do I have a virus on my computer - Microsoft Q&A
• How can I remove McAfee Norton Pop Ups on Windows 11? It is not showing up on Apps or Task Manager. - Microsoft Q&A
• I WAS HACKED - Microsoft Q&A