Trying to clear pop up trojan virus windows

james farrow 0 Reputation points
2026-03-05T12:52:54.38+00:00

I'm getting multiple pop up claiming a Trojan virus has been detected. I ran MS safety scanner in quick mode and it found an infected file, but still the oopo ups persisted. Ran a full scan and it found 18 infected files, but still persisted. A subsequent run found 40 infected files and they're still popping up.

  1. So what do I try next?
  2. What happens to the infected files
  3. I want to send a file on email, but I don't want to send an infected file ,is it safe?

Thanks in advance for any assistance.

Regards

Jim Farrow

Windows for home | Windows 11 | Security and privacy

2 answers

Sort by: Most helpful
  1. AI answer

    2026-03-05T12:53:19.2133333+00:00

    Those pop-ups are almost certainly a tech‑support scam in the browser, not a legitimate Microsoft virus alert.

    1. What to try next
    2. Close the scam page and browser
      • Press Alt + F4 repeatedly to close the browser window, or
      • Press Ctrl + Shift + Esc → open Task Manager → select the browser (Edge/Chrome/Firefox) → End task.
      • If that fails, hold the power button until the PC turns off, then restart.
    3. Clear the browser cache and data
      • After restart, open the browser, clear cache and site data (cookies/history). This removes any script that keeps reopening the scam page.
    4. Run built‑in Microsoft malware tools
      • Run a full scan again with Microsoft Defender Antivirus from Windows Security.
      • Then run the Malicious Software Removal Tool:
        1. Press Windows key + R.
        2. Type %windir%\system32\mrt.exe and select OK.
        3. Approve the prompt and run a full scan.
      • If the same threat keeps coming back, run Microsoft Defender Offline:
        1. Go to Start > Settings > Update & Security > Windows Security > Virus & threat protection.
        2. Under Current threats, select Scan options.
        3. Choose Windows Defender Offline scan → Scan now (PC will restart and scan outside Windows).
    5. If pop‑ups still appear
      • Use a modern browser like Microsoft Edge with Microsoft Defender SmartScreen enabled to block malicious sites.
      • Avoid sites with illegal downloads or suspicious content, as revisiting the same site can reinfect or re‑trigger the scam.

    If after these steps malware is still repeatedly detected, follow the advanced guidance in the malware troubleshooting article and consider professional support.

    1. What happens to the infected files

    Behavior depends on what the security tool chose for each threat:

    • Remove – the file is deleted from the PC.
    • Quarantine – the file is moved to a safe location and blocked from running.
    • Partially removed – some components were cleaned, but not all. In this case Microsoft recommends:
      • Run a full scan with the Malicious Software Removal Tool (mrt.exe).
      • Restart the PC and install the latest Windows and security updates.
      • If needed, use Microsoft Defender Offline to catch hidden components.

    If a threat is only partially removed, the report will say so; additional scans and offline scan are required to fully clean it.

    1. Is it safe to email a file from this PC?

    Before emailing any file:

    1. Make sure the system is clean as above (Defender full scan, MSRT, and Defender Offline if needed).
    2. Scan the specific file:
      • Right‑click the file → scan with your Microsoft security software.
    3. If the file is flagged as malware or unwanted software:
      • Do not send it.
      • Let the security software remove or quarantine it.

    If a file is not detected but is suspicious (for example, came from an untrusted source), it can be submitted to Microsoft for analysis using Submit a file for malware analysis from the malware troubleshooting article. Only send files by email when they are not flagged and are from a trusted source.

    Also, never call phone numbers shown in pop‑up “virus alerts” and never follow instructions from those pages; Microsoft does not lock PCs or display phone numbers in that way.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.
  2. David-M 127.5K Reputation points Independent Advisor
    2026-03-05T13:28:54.56+00:00

    Hi. I'm David, and I'm happy to help you.


    To better understand the situation, it would be very helpful if you could share a screenshot of the pop-up. That way, I can check whether the alert is truly coming from your antivirus software or if it's just a false warning generated by the browser or another source.

    Use the shortcut "Windows + Shift + S" to use the screenshot tool.

    Be sure to censor any personal information. The Microsoft Community is public.


    I await your reply.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.