That alarming pop-up warning you that your computer is infected with 47 viruses is almost certainly not real. It is scareware — a browser-level trick designed to make you panic and click something you shouldn’t. The good news is that in most cases, your computer is completely fine. You just need to close it the right way and clean up whatever caused it to appear.
Here is how to do that in three steps.
Step 1: Force-close your browser using Task Manager
Do not click anything inside the pop-up. Not the X, not the “Scan Now” button, not the “Close” option they put inside the alert. Clicking anything in a fake virus pop-up can trigger a download or redirect you to a phishing site.
Instead, shut the browser down from the outside:
- Press Ctrl + Shift + Esc to open Task Manager.
- Find your browser in the list (Chrome, Edge, Firefox — whichever you were using).
- Click it once to select it, then click End Task.
When you reopen the browser, do not click “Restore previous session” if it asks. That will just bring the same tab back.
Step 2: Clear your browser cache
Fake virus alerts often come from malicious ads or compromised pages that stay cached in your browser. Clearing the cache for the last 24 hours removes whatever was loaded from that session.
Microsoft Edge
- Click the three dots at the top right, then go to Settings > Privacy, search, and services.
- Under Clear browsing data, click Choose what to clear.
- Check Cached images and files, set the time range to Last 24 hours, and click Clear now.
Google Chrome
- Click the three dots at the top right, then go to Settings > Privacy and security > Clear browsing data.
- Check Cached images and files, set the time range to Last 24 hours, and click Clear data.
Firefox
- Click the three lines at the top right and go to Settings > Privacy & Security.
- Under Cookies and Site Data, click Clear Data.
- Make sure Cached Web Content is checked, set the time range to Last 24 hours, and click Clear.
Step 3: Run a full system scan
In most cases the pop-up was just a browser trick and there is nothing actually on your computer. But if the alerts kept coming back, or if you clicked something before you could stop yourself, it is worth running a scan to be sure.
- Open your antivirus software. If you don’t have one installed, Windows Defender is built into Windows and works fine for this.
- Look for a Full Scan or Advanced Scan option.
- Run it and follow any prompts to remove anything it finds.
If the scan comes back clean and the pop-ups stop after clearing your cache, you’re done.
What these pop-ups actually are
Fake virus alerts are a type of scareware. They are not coming from your antivirus software or from Windows. They are coming from a website, a malicious ad, or a browser notification you accidentally allowed at some point.
A few ways they show up:
- A shady site asked to send you notifications, you clicked Allow without thinking, and now it is sending fake security alerts directly to your screen.
- A legitimate website was serving a malicious ad that redirected your tab.
- A browser extension you installed at some point is generating them.
Real antivirus software does not communicate through your web browser. If you see a virus warning inside a browser tab or as a browser notification, it is not real. It does not matter if it has Microsoft’s logo on it or lists a phone number to call — that number goes to a scammer.
How to stop it from happening again
After you’ve cleaned up the current situation, two things will cut the chances of it happening again significantly:
Check your browser notification permissions. In Chrome, go to Settings > Privacy and security > Site Settings > Notifications. Look under “Allowed to send notifications” and remove anything you don’t recognize. Edge and Firefox have the same setting in roughly the same place.
Install an ad blocker. uBlock Origin is free, open source, and blocks the category of malicious ads that generate most of these pop-ups. It is the single highest-value thing most users can add to their browser.
Beyond that: keep your browser updated, be cautious about clicking Allow on notification requests from sites you don’t know, and if you ever see a pop-up with a phone number telling you to call Microsoft or Apple, close it. They don’t work that way.
If your team keeps running into these or you’re not sure whether something got through, safemode IT can take a look. Free assessment, no pressure.