Screen Lock with Virus Alert

Question

Get message with screen locked "RAHSECURE.COM Immediate Action Required We have detected a trojan (e.tre_worm_Windows" How do I get it out of the system?

Answer 1

This is a fake tech-support scam page in the browser, not a real Microsoft Defender alert. It locks the screen visually but does not mean the device is fully infected.

To close it and unlock the screen:

1. Press Ctrl + Alt + Del.
2. Select Task Manager.
3. In Task Manager, end all processes for the web browser that is open (for example, Microsoft Edge, Chrome, or Firefox) by selecting them and choosing End task.
4. If that does not work, hold down the power button until the PC turns off, then turn it back on.

After the screen is unlocked:

1. Open the browser again, but do not restore previous tabs if prompted.
2. Clear the browser cache and site data.
3. Optionally install an ad blocker extension from a trusted store to reduce malicious pop-ups.

To check for real malware:

1. Run a full scan with Microsoft Defender Antivirus (Windows Security → Virus & threat protection → Scan options → Full scan).
2. Optionally run Microsoft Safety Scanner as an additional on-demand scan. For more information and download instructions, see Microsoft Safety Scanner.

If no malware is found and no software was installed and no remote access was granted to a caller, the system is typically not compromised; the page was just a scam pop-up. Never call phone numbers or follow instructions shown in such pop-ups.

For more background on these scams and general malware protection, see the referenced articles.

---

References:

• Windows defender scam
• Microsoft Defender Scam or Do I have a virus on my computer - Microsoft Q&A
• possible virus, computer locked - Microsoft Q&A
• Microsoft resources and guidance for removal of malware and viruses
• Trojans

Answer 2

Well done for being suspicious, you would be amazed how many users fall for this!

This is a well known Tech Support Scam, do not click anything on that page and do not phone any number on that page.

When this happens, open Task Manager (Ctrl + Shift + Esc)

On the processes tab, locate your browser and end task on that

You can then continue to user your PC and browse the Internet

This is caused by a browser re-direct on a page you are visiting, and usually does not indicate your PC is infected. try to avoid any page that jumps out to this sort of page.