Geek Doctor logo — a friendly green cross in a rounded squareGeek Doctor
Free computer checkups, in plain words.

That "virus" pop-up is lying to you — here's the 2-minute proof

The screen is flashing. A voice may be talking. There's a phone number and a warning not to turn anything off. Stop. Nothing about that screen has examined your computer — and you can prove it in two minutes.

Proof 1: the phone number (10 seconds)

Microsoft publishes the rule itself: real Microsoft error and warning messages never include a phone number, and Microsoft does not call you, unsolicited, to offer fixes. A warning with a number to call is a sales pitch wearing a warning's clothes. That's not an opinion — it's the manufacturer's own test, and the pop-up fails it.

Proof 2: it's a web page (1 minute)

Press Alt + F4. If the "warning" closes like a browser window — because it is one — you have your answer. Real protection lives in the Windows Security app and stays put; a web page can only shout while it's open. Microsoft's own advice for a screen full of scary pop-ups is the same: close the browser (Alt+F4 if the mouse won't), or restart the computer. Restarting harms nothing, whatever the page claims.

Now, the calm checks

  1. Don't reopen the page if the browser offers to restore it.
  2. Open Windows Security → Virus & threat protection → Quick scan. On the overwhelming majority of these occasions it finds nothing — because there was nothing.
  3. Take back the megaphone: in your browser, Settings → Privacy and security → Site settings → Notifications, and remove sites you don't recognise. That permission is how the page got to dress up. (Explained here.)
  4. If you have a minute, report it at microsoft.com/reportascam.

Why this works on smart people

Because it arrives as an emergency and emergencies skip the queue. Every element — siren, countdown, "do not shut down" — exists to keep you from doing the one thing that defeats it: pausing. Services know this moment well; it's the moment a US$149.99 "virus removal" gets sold for what is, most of the time, a closed tab and a removed permission. When the same screen comes back — and it comes back to everyone — Geek Doctor will examine what it actually is, remove the permission, and write the whole thing in its notebook so future-you starts from the answer. Free.

Full explanation: the fake "virus" pop-up, explained.

← All blog posts