Malware virius

Treat the person as a scammer unless you initiated the session by contacting Microsoft Support directly; a name, caller ID, “badge number,” Microsoft logo, or successful computer scan does not verify an agent.

How to judge whether the agent was genuine

A legitimate remote-support session should have started after you contacted Microsoft through its official support channel. Microsoft states that it does not make unsolicited calls to report computer problems, and Microsoft error or warning messages never contain telephone numbers. Scammers can also spoof legitimate caller ID information.^1^

These are strong scam indicators:

• The agent called unexpectedly or appeared through a virus pop-up.
• A pop-up instructed you to call a telephone number.
• The person requested remote access when you had not opened a Microsoft support case.
• They requested passwords, unrelated personal information, gift cards, cryptocurrency, or payment to remove alleged viruses.
• They asked you to install remote-control software.

Quick Assist itself does not prove legitimacy. It permits another person to view your screen and potentially control the PC. Microsoft says to allow a helper only when you initiated the interaction by contacting Microsoft Support directly.^2^

If you opened a genuine Microsoft support request, return to that original support conversation or case independently and ask Microsoft to confirm the session. Do not use contact details supplied by the questionable agent.

If the agent accessed your Windows 11 PC

Disconnect the PC from Wi-Fi or unplug its network cable, then:

1. End remote access and uninstall anything they requested
   • Open Start → Settings → Apps → Installed apps.
   • Remove unfamiliar remote-access or support applications.
   • Do not reconnect with the person.
2. Run a full Windows Security scan
   • Open Start, search for Windows Security, and open it.
   • Select Virus & threat protection → Scan options → Full scan → Scan now.
   • Apply any action Windows Security recommends.
3. Install security updates
   • Go to Start → Settings → Windows Update → Check for updates.
   • Install available updates and restart the computer.
4. Change exposed passwords
   • Using another trusted device if possible, change passwords for your Microsoft account, email, banking, and any accounts opened during the session.
   • Do not reuse the old passwords.
5. Contact your financial provider if you paid or disclosed card information
   • Explain that this involved a suspected technical-support scam.
   • Ask about disputing charges and replacing the affected card.

Microsoft recommends uninstalling applications installed at the scammer’s request, running a full Windows Security scan, updating Windows, changing passwords, and contacting the card provider when payment information was exposed.^1^

If the person had full control, installed unknown software, or suspicious warnings continue, consider resetting Windows after backing up essential personal files. A reset is disruptive and can remove applications and settings, but Microsoft identifies it as an appropriate recovery option after scammers have accessed a device.^1^

Report it

Report the incident using Microsoft’s scam-reporting page:

https://www.microsoft.com/reportascam

If money or identity information was stolen, also notify the relevant financial institution and local law enforcement.^1^

References

1. Protect yourself from tech support scams | Microsoft Support
2. Solve PC problems remotely using Quick Assist | Microsoft Support