Additional Microsoft Defender tools and services that provide security across various platforms and environments
This is most likely a browser-based tech support scam, not a real Microsoft Defender lock. Microsoft error and warning messages never include phone numbers.
Try these steps in order:
- Do not call any phone number shown in the message and do not enter any information.
- Close the browser page that is showing the alert:
- Press Ctrl+Alt+Del.
- Open Task Manager.
- End browser processes, or close all browser items.
- If the browser cannot be closed, restart the PC. The warning telling not to restart is part of the scare tactic.
- After restarting, run a malware scan:
- Go to Start > Settings > Update & Security > Windows Security > Virus & threat protection.
- Under Current threats, select Scan options.
- Select Windows Defender Offline scan and then Scan now.
- Important: save work first, because the PC will restart before the offline scan starts.
- If Microsoft Defender keeps finding the same threat after restart, avoid revisiting the same website or email that triggered it. Repeated detection can happen if the malware is being reinstalled or if the same malicious site is opened again.
- If scans report a threat was partially removed, run the Malicious Software Removal Tool:
- Press Windows key + R.
- Run %windir%\system32\mrt.exe.
- Allow it to make changes if prompted, then follow the prompts to scan and clean the PC.
- Restart the PC and install the latest updates.
- If Microsoft Defender is encountering scan or removal errors, run Windows Update and, if needed, manually install the latest protection updates.
- Do not run another real-time antivirus product at the same time as Microsoft Defender. Multiple real-time security products can cause problems.
If the same alert appears only inside the browser again, end the browser task and avoid that site. If Windows Security continues detecting real threats or the system remains unstable, use recovery/reset options after backing up files. Resetting or reinstalling can cause data loss, so back up files first and restore from backups created before the infection if possible.
References:
- Tech support scams
- My computer has been locked up by Microsoft Windows defender! It says my computer has picked up a Trojan-type spyware! I can’t do anything with it! Can you please help me? - Microsoft Q&A
- Computer locked up - Microsoft Q&A
- Windows defender has temporarily disabled my internet and computer for suspicious activity - Microsoft Q&A
- Troubleshoot problems with detecting and removing malware
- Antivirus and antimalware software: FAQ