The 'Call Microsoft' Popup Came From an Ad at the Bottom of His Email. The Computer Was Clean.
The first of three virus calls today was a desktop that had been taken over by a full-screen warning: a Windows/Microsoft-looking page saying the computer was infected and to call a 1-888 number right away. He did the right thing and called me instead.
What the scan found: nothing
I went through startup programs, background tasks, scheduled tasks, browser extensions, and system files, then ran a full Windows Defender scan. Clean on every count. There was no virus on this computer. There never had been.
So where did the popup come from? The browser history had the answer. It started with a click on one of those “recommended for you” ad boxes at the bottom of the email inbox, which redirected through an ad network to a page built to look like an official Windows and McAfee alert, complete with fake scan details and a big “call this number” button. It is a web page. Nothing installed. Close it and it is gone.
The second scare on the same machine
While I was in there, a cleanup utility on the computer was flashing its own warning: “13 outdated drivers!” in red, with a button to fix them (for a fee). So I asked Windows itself, which is the only count that is real: 129 devices, zero driver problems. The warning is an upsell, not a diagnosis.
The machine also had two copies of that cleanup tool installed, an old version left behind next to the current paid one, both running in the background. I removed the old duplicate, kept the licensed one, and turned off its background nagging so it stops throwing scary numbers at him. He can still run it by hand whenever he likes.
Three rules that would have saved the call
- Real Microsoft or Windows alerts never give you a phone number. Neither does Apple. If a page says “call support,” it is a scam. Close it with Ctrl+W or Alt+F4 and move on.
- Skip the “recommended” ad boxes under your email and under news articles. That is where this page came from.
- Ignore “outdated driver” counts from cleanup tools. If Windows is not complaining, your drivers are fine.
Total time on this one: under an hour, and the honest answer was “your computer is fine.” I would rather tell you that than sell you a cleanup you do not need. If a scary screen is holding your computer hostage, call or text and describe what it says. Half the time I can tell you it is a fake before I ever leave the driveway.