Windows Defender – Security Warning POP-UP SCAM (Virus removal guide)

What is Windows Defender – Security Warning SCAM?

Windows Defender – Security Warning is a technical support scam in which cybercriminals use social engineering tactics to trick users into unnecessary technical support services to supposedly fix computer or Windows OS problems that don’t exist. Victims are encouraged to pay for unnecessary services and software, or even provide remote access to their computer. Most often, scammers ask victims to pay by wire transfer, put money on a gift card, prepaid card or use a money transfer app because such payments are difficult to reverse.

Users can stumble onto sites with the Windows Defender – Security Warning scam just by entering a misspelled web address. Users can also be redirected to such scams by malvertising (malicious advertisements), Adware and potentially unwanted programs (PUPs). The technical support scam is often hosted using Google, Amazon, CloudFront and other cloud services. This is not the first time that scammers/cyber criminals have used legitimate cloud services for malicious purposes.

“Windows Defender – Security Warning” pop-ups are a SCAM

QUICK LINKS

• What is Windows Defender – Security Warning SCAM?
• Protection
• Removal

When users land on one of the sites running the “Windows Defender – Security Warning” scam, a pop-up window appears with error code #0x898778, which informs that Trojan-Spyware has been found, access to the computer is blocked and email credentials, banking passwords, facebook logins, pictures & documents have been compromised. In order to restore access to the computer, fix the detected error, remove found malware, it is suggested to immediately call the specified number. It is important to emphasize that these error messages are fake, they aim to scare visitors into calling a fake Windows Support.

A variant of the “Windows Defender – Security Warning” SCAM:

The scammers behind this scam try to trick users into buying help in removing viruses or installing a remote control tool, which they pretend to be a program to diagnose a computer. It is important to understand that having access to a computer, scammers can steal private information and personal files, install malware (spyware, ransomware or Trojan horses), make fraudulent purchases.

Text presented on the “Windows Defender – Security Warning” error messages:

Windows Defender – Security Warning
** ACCESS TO THIS PC HAS BEEN BLOCKED FOR SECURITY REASONS **

Your computer has alerted us that it has been infected with a Trojan Spyware. The following data has been compromised.

> Email Credentials
> Banking Passwords
> Facebook Login
> Pictures & Documents

Windows Defender Scan has found potentially unwanted Adware on this device that can steal your passwords, online identity, financial information, personal files, pictures or documents.

You must contact us immediately so that our engineers can walk you through the removal process over the phone.

Call Microsoft Support immediately to report this threat, prevent identity theft and unlock access to this device.

Closing this window will put your personal information at risk and lead to a suspension of your Windows Registration.

Call Microsoft Support: +1-(805)-510-7708 ( USA Toll Free )

Cancel OK

As mentioned above, the Windows Defender – Security Warning scam is caused by Adware, pop-ups, followed by software downloads and redirects. Adware also known as ‘adware software’ covers harmful programs which are specifically designed to display lots of ads in form of pop ups, discount offers, promos or even fake alerts on the PC. Adware can seriously affect your privacy, your computer’s performance and security. Adware can be installed onto your computer without your knowledge.

The Windows Defender – Security Warning scam runs a fake system scan

Most of unwanted advertisements and pop ups come from internet browser toolbars and/or addons, BHOs (browser helper objects) and optional software. Most often, these items claim itself as applications which improve your experience on the World Wide Web by providing a fast and interactive startpage or a search provider that does not track you. Remember, how to avoid the unwanted programs. Be cautious, start only reputable programs which download from reputable sources. NEVER install any unknown and questionable apps.

Text presented in the second pop-up of the Windows Defender – Security Warning scam:

Windows Firewall Protection

Microsoft
Trojan Spyware Alert – Error Code: #0x898778
Access to this PC has been blocked for security reasons.

Contact Windows Support: +1-(888)-351-4098

Threat Detected – Trojan Spyware
App: Ads.financetrack(1).exe

Run Anyway Back to Safety

The Windows Defender – Security Warning scam, Fake alerts:

Threat Summary

Microsoft Windows Virus Alert, Firewall Spyware Alert, McAfee Tollfree are other technical support scams. There are many sites on the Internet that promote technical support scams. The “technical support scam” sites should never be trusted, they should be closed as soon as they appear on the screen.

How to protect against “Windows Defender – Security Warning” scam

To avoid becoming a victim of scammers, it is important to always keep in mind:

• There are no websites that can detect security problems.
• Windows Defender Security pop-up warnings will never ask you to call a phone number.
• Microsoft tech support will never ask you to pay for support with gift cards or cryptocurrency.
• Never install software promoted by scam sites, as it can be useless, and besides, it can be dangerous for you and your computer.
• Close “Windows Defender – Security Warning” as soon as it appears on your computer screen. Scammers can prevent you from closing it in various ways. In such cases, close your browser using Task Manager or restart your computer. If the next time you launch the browser, it prompts you to restore the previous session, abandon it, otherwise this scam will reopen on your screen.
• Use an ad blocker when browsing the internet. It can block known scam sites and protect you from scammers.
• If you think your computer has a virus, install trusted antivirus software, or update your computer’s security software and run a system scan.

Another variant of the “Windows Defender – Security Warning” scam:

Text presented on this page:

Windows Defender – Security Warning

App: Ads.fiancetrack(2).dll
Threat detected: Trojan Spyware

Windows was blocked due to questionable activity.

Contact Technical Support: +1-833-930-2284
Continue Back

How to remove Windows Defender – Security Warning pop-ups (removal guidance)

Fortunately, we’ve an effective method that will help you manually or/and automatically get rid of the Windows Defender – Security Warning pop-up scam and bring your internet browser settings back to normal. Below you’ll find a removal tutorial with all the steps you may need to successfully get rid of adware software and its traces. Certain of the steps below will require you to exit this website. So, please read the steps carefully, after that bookmark it or open it on your smartphone for later reference.

To remove Windows Defender – Security Warning, execute the steps below:

1. Uninstall adware software through the Windows Control Panel
2. Reset Mozilla Firefox settings
3. Reset Chrome settings
4. Automatic Removal of Windows Defender – Security Warning pop-ups
5. How to Stop Windows Defender – Security Warning pop-ups

Looking for a method to remove scam pop-ups manually, without installing any removal tools? Then this section of the blog post is just for you. Below are some simple steps you can take. Performing these steps requires basic knowledge of internet browser and Windows setup. If you doubt that you can follow them, it is better to use free software listed below that can help you remove adware and get rid of scam popups.

Uninstall adware software through the Windows Control Panel

First of all, check the list of installed software on your PC and uninstall all unknown and newly installed apps. If you see an unknown program with incorrect spelling or varying capital letters, it have most likely been installed by malware and you should clean it off first with malware removal tool such as Zemana Anti-Malware.

Windows 7	Windows 8
Click ‘Start’. In the Start menu select ‘Control Panel’. Find and select ‘Programs and Features’ or ‘Uninstall a program’. Select the program. Click ‘Uninstall’.	Press and hold Windows key and hit X key. Select ‘Programs and Features’ from the menu. Select the program. Click ‘Uninstall’.
Windows 10	Windows 11
Press and hold Windows key and hit X key. Select ‘Programs and Features’ from the menu. Select the program. Click ‘Uninstall’.	Open Settings, Use the shortcut keys Win + I. Select Apps from the left pane. Select Apps & Features from the right pane. Next to the application that you wish to uninstall, click on the three vertical dots. Select Uninstall.

Reset Mozilla Firefox settings

If the Firefox browser is redirected to the Windows Defender – Security Warning scam and you want to restore the Firefox settings back to their original state, then you should follow the steps below. Your saved bookmarks, form auto-fill information and passwords won’t be cleared or changed.

Start the Mozilla Firefox and press the menu button (it looks like three stacked lines) at the top right of the internet browser screen. Next, click the question-mark icon at the bottom of the drop-down menu. It will show the slide-out menu.

Select the “Troubleshooting information”. If you’re unable to access the Help menu, then type “about:support” in your address bar and press Enter. It bring up the “Troubleshooting Information” page as shown on the screen below.

Click the “Refresh Firefox” button at the top right of the Troubleshooting Information page. Select “Refresh Firefox” in the confirmation dialog box. The Mozilla Firefox will begin a process to fix your problems that caused by the adware. After, it’s finished, press the “Finish” button.

Reset Chrome settings

This step will show you how to reset Google Chrome browser settings to default values. This can help to get rid of the Windows Defender – Security Warning pop-ups and fix some browsing issues, especially after adware infection. When using the reset feature, your personal information like passwords, bookmarks, browsing history and web form auto-fill data will be saved.

First launch the Google Chrome. Next, click the button in the form of three horizontal dots ().

It will open the Chrome menu. Select More Tools, then click Extensions. Carefully browse through the list of installed add-ons. If the list has the addon signed with “Installed by enterprise policy” or “Installed by your administrator”, then complete the following steps: Remove Google Chrome extensions installed by enterprise policy.

Open the Chrome menu once again. Further, press the option called “Settings”.

The web browser will show the settings screen. Another way to display the Chrome’s settings – type chrome://settings in the browser adress bar and press Enter

Scroll down to the bottom of the page and click the “Advanced” link. Now scroll down until the “Reset” section is visible, as on the image below and click the “Reset settings to their original defaults” button.

The Chrome will show the confirmation dialog box like below.

You need to confirm your action, press the “Reset” button. The browser will run the task of cleaning. When it is done, the web-browser’s settings including new tab, start page and search provider by default back to the values that have been when the Google Chrome was first installed on your computer.

Automatic Removal of Windows Defender – Security Warning pop-ups

If the Windows Defender – Security Warning popups are still there, the situation is more serious. But do not worry. There are several tools which are created to detect and remove adware from your browser and computer. If you are searching for a free way to adware removal, then Zemana Anti-Malware (ZAM) is a good option. Also you can get Hitman Pro and MalwareBytes Anti Malware. Both programs also available for free unlimited scanning and for removal of found malicious software, adware software and potentially unwanted apps.

Zemana AntiMalware is a malware scanner that is very effective for detecting and deleting adware that causes Windows Defender – Security Warning popups in your browser. The steps below will explain how to download, install, and use Zemana to scan and remove malicious software, spyware, adware, potentially unwanted applications, hijackers from your PC for free.

1. Installing the Zemana is simple. First you will need to download it by clicking on the following link. Save Zemana to your Desktop so that you can access the file easily.
   
   

   Zemana AntiMalware
   154673 downloads
   Author: Zemana Ltd
   Category: Security tools
   Update: July 16, 2019
   
2. At the download page, click on the Download button. Your web-browser will show the “Save as” dialog box. Please save it onto your Windows desktop.
3. Once downloading is done, please close all programs and open windows on your computer. Next, launch a file named Zemana.AntiMalware.Setup.
4. This will launch the “Setup wizard” of Zemana AntiMalware (ZAM) onto your PC. Follow the prompts and don’t make any changes to default settings.
5. When the Setup wizard has finished installing, the Zemana AntiMalware will open and open the main window.
6. Further, click the “Scan” button to locate adware related to the Windows Defender – Security Warning pop up scam. A scan may take anywhere from 10 to 30 minutes, depending on the number of files on your device and the speed of your PC system. When a threat is detected, the number of the security threats will change accordingly. Wait until the the checking is finished.
7. Once the scan is finished, Zemana Anti-Malware will produce a list of unwanted apps and adware.
8. Next, you need to click the “Next” button. The utility will start to remove adware which causes scam pop-ups. After disinfection is finished, you may be prompted to restart the PC.
9. Close Zemana and continue with the next step.

If you are having problems with Windows Defender – Security Warning pop ups removal, then check out MalwareBytes. This is a tool that can help clean up your PC and improve your speeds for free. Find out more below.

First, click the link below, then click the ‘Download’ button in order to download the latest version of MalwareBytes Anti-Malware.

Malwarebytes Anti-malware
309972 downloads
Author: Malwarebytes
Category: Security tools
Update: April 15, 2020

Once the downloading process is done, run it and follow the prompts. Once installed, the MalwareBytes AntiMalware will try to update itself and when this procedure is finished, press the “Scan” button to perform a system scan with this tool for the adware related to the Windows Defender – Security Warning scam. Depending on your computer, the scan may take anywhere from a few minutes to close to an hour. When a threat is detected, the number of the security threats will change accordingly. Wait until the the scanning is done. You may remove items (move to Quarantine) by simply press “Quarantine” button.

The MalwareBytes Anti Malware is a free removal tool that you can use to delete all detected folders, files, services, registry entries and so on. To learn more about this malicious software removal tool, we recommend you to read and follow the guide or the video guide below.

How to Stop Windows Defender – Security Warning pop-ups

If you want to remove intrusive ads, browser redirects and pop-ups, then install an ad-blocker program such as AdGuard. It can block Windows Defender – Security Warning scam, stop unwanted advertisements, popups and block web-sites from tracking your online activities when using the Google Chrome, Microsoft Edge, Microsoft Internet Explorer and Firefox. So, if you like surf the Internet, but you don’t like unwanted advertisements and want to protect your PC from malicious web-pages, then the AdGuard is your best choice.

1. First, click the link below, then click the ‘Download’ button in order to download the latest version of AdGuard.
   
   

   Adguard download
   24692 downloads
   Version: 6.4
   Author: © Adguard
   Category: Security tools
   Update: November 15, 2018
   
2. After downloading it, launch the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. Once the installation is finished, press “Skip” to close the installation program and use the default settings, or click “Get Started” to see an quick tutorial which will allow you get to know AdGuard better.
4. In most cases, the default settings are enough and you don’t need to change anything. Each time, when you start your device, AdGuard will launch automatically and stop unwanted ads, block the Windows Defender – Security Warning scam, as well as other harmful or misleading webpages. For an overview of all the features of the program, or to change its settings you can simply double-click on the icon called AdGuard, which is located on your desktop.

Finish words

Once you have removed the adware software using this few simple steps, IE, Google Chrome, Mozilla Firefox and MS Edge will no longer display the “Windows Defender – Security Warning” pop-ups when you surf the World Wide Web. Unfortunately, if the few simple steps does not help you, then you have caught a new adware, and then the best way – ask for help.

Please create a new question by using the “Ask Question” button in the Questions and Answers. Try to give us some details about your problems, so we can try to help you more accurately. Wait for one of our trained “Security Team” or Site Administrator to provide you with knowledgeable assistance tailored to your problem with the “Windows Defender – Security Warning” pop up scam.