Severity scale:  

Remove “Microsoft Warning Alert” Tech support scam virus (Virus Removal Guide) - updated Sep 2020

removal by Linas Kiguolis - -   Also known as Microsoft Warning Alert | Type: Malware

Microsoft Warning Alert – a scam that threatens users to disable their computers because of the pornographic spyware

Microsoft Warning alert scamMicrosoft Warning alert scam can end up with the money loss, identity theft and similar issues

Microsoft Warning Alert is a scam that falls into tech support scam category. This fake warning message is typically displayed to users when they are browsing the web without much thinking and enter a wrong URL into the search bar. Such search queries can easily redirect them to an unreliable website ( in this case) who displays Microsoft virus alert. However, you should always look for the green HTTPS mark indicating that the page is real. Additionally, if you have been dealing with such redirects constantly, it means that your system is infected with adware which alters web browsers and additionally reroutes them to predetermined websites. Here, you are urged to contact Microsoft Tech Support via the provided number[1] to get rid of the “spyware and riskware.” Unfortunately, users typically end up paying money to cybercriminals without realizing that they just have been scammed. 

Name Microsoft Warning Alert, Microsoft Spyware Alert, Microsoft Virus
Type Adware
Sub-type Tech support scam
Danger level Medium. Might lead to malware infection, sensitive detail disclosure and lost/stolen money
main risks
  • Redirects to malicious websites; 
  • Revealing personal data;
  • Installing fake tools promoted by the scam.
  • Giving a remote control to a hacker
Distribution Software bundling, suspicious ads
Symptoms Fake Microsoft alerts, redirects to fake support websites
Elimination Get rid of malware by using Reimage Reimage Cleaner Intego or follow manual instructions below

An ordinary Microsoft virus finds its victim out of nowhere and includes 0x80072ee7 (Error # 0x80072ee7, for example) numbers to make it look even more genuine. Additionally, the virus reports about  pornographic spyware which can be fixed only by “certified Microsoft technicians.” In reality, there is no virus on the system except adware which is redirecting you to the fake tech support pages.

The fake Microsoft spyware alert typically displays the following or similar texts: 

** Microsoft Warning Alert **
Malicious Pornographic Spyware/Riskware Detected
Error # 0x80072ee7
Please call us immediately at: 0-800-046-5729
Do not ignore this critical alert.
If you close this page, your computer access will be disabled to prevent further damage to our network.
Your computer has alerted us that it has been infected with a Pornographic Spyware and riskware. The following information is being stolen…
> Financial Data
> Facebook Logins
> Credit Card Details
> Email Account Logins
> Photos stored on this computer
You must contact us immediately so that our expert engineers can walk you through the removal process over the phone to protect your identity. Please call us within the next 5 minutes to prevent your computer from being disabled or from any information loss.
Toll Free: 0-800-046-5729

Important security alert!
Virus intrusions detected on your computer.
Your personal data and system files may be at serious risk.
All system resources are halted to prevent any damage.
Please call customer service immediately to report these threats now.

There are several variations of the text displayed, but one thing is always the same –  crooks are fast to use the name of Microsoft company in order to make their messages more trustworthy. However, we can assure you that this is a Microsoft virus scam that has nothing to do with real technicians. Keep in mind that they would never ask you to contact them via the telephone – the company also explains that in their scam warning article.[2] 

After clicking on the fake Microsoft Warning Alert, you can notice that they are pointing to nowhere. Besides, you should always check the URL of the website sending you such ads – remember that the original company's site is, not some suspicious,, or page. These sites are seeking to look like official ones to gain victims' trust. However, please pay attention to small details such as site’s URL or grammar mistakes[3] left in the text – they reveal that the website has no relations with this tech giant.

Usually, users get redirected to Microsoft virus phishing websites when they mistype URLs or browse through shady Internet websites. However, they can also get redirected to them after installing a malicious program on their computers. The malicious program starts redirecting the user to these phishing sites without stopping because its main task is to convince him/her to call the fake tech support.

Microsoft scam alertMicrosoft scam alert is a fake Microsoft warning seeking to trick users into contacting fraudsters

Typical tech support scam, including Microsoft Warning Alert scam, is seeking to encourage the victim to provide personal details or even credit card details or convince one to purchase a pack of free and useless software. It is not a secret that cybercrooks often sure social engineering expertise to convince users that their personal information and computer safety is at risk.

Additionally, fake technicians threaten users that their machine will be locked to “prevent further damage.” Once the call is made by the victim, fraudsters can try to resell a legitimate anti-spyware program for a much higher price and add Adblocker as a “bonus,” however you need to know that Adblocker is a free program.

If Microsoft virus alert is showing fake warnings, perform a thorough system scan with anti-spyware software to find all malicious components that are responsible for redirects to phishing Microsoft websites. If your machine is clear of PUPs and malware, make sure you close down your Google Chrome, Internet Explorer, Safari, Mozilla Firefox or another browser immediately after redirection to a suspicious site. Before reopening your browser, verify that the previously opened tabs are not opening again.

To remove Microsoft Warning Alert, use Reimage Reimage Cleaner Intego to do it quickly and without wasting your time. Note that this is the easiest way to get rid of adware program from your system which only takes several minutes. Additionally, automatic elimination uninstalls all components which might be supporting the potentially unwanted program.

However, if you decide to challenge yourself and complete Microsoft Warning Alert removal by yourself, make sure that you have the necessary skills and knowledge. Our manual termination guidelines can help you complete the elimination procedure successfully. For that, you are advised to follow the instructions carefully.

Microsoft Warning Alert virus"Microsoft Warning Alert" virus displays a fake message claiming that the victim's computer is infected and that he/she needs to contact the so-called Microsoft Tech Support via given number

The most popular Microsoft Virus examples of 2020

In 2020, there were dozens of scams using Microsoft name and relying on the same well-known technology as the inspiration. Below, we will explain the most popular types of this scam.

Windows Warning alert

This is one of the most similar alerts used to trick users into thinking that their computer is not in a proper state. Windows Warning alert has mostly been hiding in gaming, torrent sharing or related fishy domains. You can easily distinguish it from the indicated 1-877-804-5390 number, though it may vary each time. In some cases, crooks might show you relatively short messages, such as:


You have excessive popups. Windows may have been infected. Please call 1-(877) 987 2250 for immediate support!

Pornographic spyware alert

Also known as “Malicious Pornographic Spyware/Riskware Detected” scam, Pornographic spyware alert is seeking to deceive its victims that visiting adult websites has somehow damaged their computers. It is not surprising, as porn sites are typically more dangerous[4] than average domains. Therefore, it is another trick used by crooks to associate the message with its seriousness and make the user panic more.

Microsoft Security Essentials Alert

This fake alert is also known as “Hicurdismos” and another version of Windows scam. Microsoft Security Essentials Alert is often triggered by a malicious executable which can also disable Task Manager, hide the mouse cursor and make the bogus message appear on the full-screen (pretending to be a legitimate Windows BSoD). The malware generally pretends to be an old version of Windows Defender (which replaced Microsoft Security Essentials in Windows 8) and creates an urgency that the security software needs to be installed in order to protect the machine from bogus malware.

Call Microsoft Support

Just as with other versions, users encounter Call Microsoft Support scam when they visit a malicious website or if they have adware injected inside their computer. Cybercrooks try to convince victims that their PCs are infected with the infamous Zeus virus that was first detected by security experts back in 2007. Just as with any other tech support scam, fraudsters are using scare tactics to intimidate victims. However, it is a scam and users will only lose their money or infect their machines with malware if they decide to contact these bad actors. 

Microsoft System Security Alert

Microsoft System Security Alert is a bogus message that appears in a pop-up message, together with another red warning in the background of the opened browser tab. The crooks try to pretend that they are technicians from Microsoft and urge victims to contact them via +1-866-217-8835 phone number, in order to unlock the allegedly blocked computer. According to cybercriminals, the IP address of the user was used without his or her consent to visit websites that contain identity theft information. Generally, it does sound quite ridiculous; however, red warnings and multiple pop-ups might prevent less computer-savvy individuals to realize that it is just a scam.

Ways to recognize the fake Microsoft Virus Warning

Let us explain how you can distinguish a genuine notification from Microsoft virus scam. First of all, it doesn’t matter if your computer automatically opens or redirects you to such website that is full of official logos. The message is a scam if:

  • You get redirected to a shady site which activates pop-up messages;
  • The website urges you to call Microsoft technician within 5 minutes;
  • You cannot easily exit the page unless you click on “Prevent this page from creating additional dialogs;”
  • Fake alerts often frighten users with Zeus virus or threaten that your Facebook account or credit card credentials might be stolen as well as displays pornographic spyware alert.

The main cause why are you interrupted by Microsoft Security Warning is freeware

The main distribution technique employed by the developers of PUPs is bundling their products with free applications and setting Quick/Recommended parameters of the installer as default. 

Note that these settings are configured to install all “recommended” pieces of software from third-party partners, and these programs tend to be entirely useless. If you want to avoid installing unwanted programs, better switch pre-selected installation mode to Custom or Advanced one.

Then you will get permission to drop off additional applications bundled with your download, so take this opportunity without any hesitation. Decompose the software pack by deselecting extra programs and then proceed to the next step of software setup.

Also, experts from[5] recommend you to avoid opening suspicious email attachments especially if you received them from unknown individuals – these attachments can rapidly compromise the computer without giving you a chance to stop the attack before the damage is done.

Microsoft spyware alert

Ways to get rid of Microsoft spyware alert

Fake warnings are very common these days, and it is vital to understand how to get rid of them successfully. To remove Microsoft Warning Alert, you have two options — either eliminate it manually from your web browsers to stop it from appearing or get rid of this thing automatically.

It is clear that the automatic virus termination method is not only faster but also safer. Security software can complete Microsoft spyware alert removal within several minutes, including the elimination of its additional elements which might continue disrupting you if left on the system. Therefore, we strongly suggest relying on the antivirus tool if you are not an experienced computer user.

However, people who want to uninstall Microsoft Security Warning PopUp manually should be aware of the potential dangers which might permanently damage their systems. Note that not only the adware-related components might keep displaying fake warnings, but also you might accidentally delete files which are necessary for your OS.

Likewise, we suggest you use the instructions given below. They are prepared by our IT experts to help you uninstall Microsoft virus and reset your browser to the primary state.  

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove “Microsoft Warning Alert” Tech support scam virus, follow these steps:

Get rid of “Microsoft Warning Alert” Tech support scam from Windows systems

To get rid of Microsoft Warning Alert scam from Windows, use the guide below. You need to find all adware-related components to get rid of these annoying ads for good.

To remove “Microsoft Warning Alert” Tech support scam from Windows 10/8  machines, please follow these steps:

  1. Enter Control Panel into Windows search box and hit Enter or click on the search result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 1
  3. From the list, find entries related to “Microsoft Warning Alert” Tech support scam (or any other recently installed suspicious program).
  4. Right-click on the application and select Uninstall.
  5. If User Account Control shows up, click Yes.
  6. Wait till uninstallation process is complete and click OK.Uninstall from Windows 2

If you are Windows 7/XP user, proceed with the following instructions:

  1. Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP
  3. Pick the unwanted application by clicking on it once.
  4. At the top, click Uninstall/Change.
  5. In the confirmation prompt, pick Yes.
  6. Click OK once the removal process is finished.

Remove “Microsoft Warning Alert” Tech support scam from Mac OS X system

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove “Microsoft Warning Alert” Tech support scam from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for “Microsoft Warning Alert” Tech support scam-related entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove “Microsoft Warning Alert” Tech support scam, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to “Microsoft Warning Alert” Tech support scam and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the “Microsoft Warning Alert” Tech support scam-related entries.Uninstall from Mac 2

Delete “Microsoft Warning Alert” Tech support scam from Internet Explorer (IE)

If Internet Explorer keeps showing fake pop-up alerts, you should uninstall the adware and its components.

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for “Microsoft Warning Alert” Tech support scam and other suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example,
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete…
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset again to complete “Microsoft Warning Alert” Tech support scam removal.Reset Internet Explorer

Erase “Microsoft Warning Alert” Tech support scam virus from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the “Microsoft Warning Alert” Tech support scam-related extension and click on the Gear icon.
  3. Click on Uninstall at the bottom.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Privacy & security.
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select everything (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Reset MS Edge if that above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

If this solution failed to help you, you need to use an advanced Edge reset method. Note that you need to backup your data before proceeding.

  1. Find the following folder on your computer: C:\\Users\\%username%\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  2. Press Ctrl + A on your keyboard to select all folders.
  3. Right-click on them and pick DeleteAdvanced MS Edge reset 1
  4. Now right-click on the Start button and pick Windows PowerShell (Admin).
  5. When the new window opens, copy and paste the following command, and then press Enter:

    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml” -VerboseAdvanced MS Edge reset 2

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.Reset Chromium Edge

Uninstall “Microsoft Warning Alert” Tech support scam from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select plugins that are related to “Microsoft Warning Alert” Tech support scam and click Remove.Remove extensions from Firefox

Clear cookies and site data:

  1. Click Menu and pick Options.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data…
  5. Select Cookies and Site Data, as well as Cached Web Content and press Clear.Clear cookies and site data from Firefox

In case “Microsoft Warning Alert” Tech support scam did not get removed after following the instructions above, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox…
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox – this should complete “Microsoft Warning Alert” Tech support scam removal.Reset Firefox 2

Eliminate “Microsoft Warning Alert” Tech support scam from Google Chrome

To disable malicious Microsoft warning alerts on Chrome, delete malicious add-ons and reset your browser.

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to “Microsoft Warning Alert” Tech support scam by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

If the above-methods did not help you, reset Google Chrome to eliminate all the “Microsoft Warning Alert” Tech support scam-components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings to complete “Microsoft Warning Alert” Tech support scam removal.Reset Chrome 2

Get rid of “Microsoft Warning Alert” Tech support scam from Safari

Remove unwanted extensions from Safari:

  1. Click Safari > Preferences…
  2. In the new window, pick Extensions.
  3. Select the unwanted extension related to “Microsoft Warning Alert” Tech support scam and select Uninstall.Remove extensions from Safari

Clear cookies and other website data from Safari:

  1. Click Safari > Clear History…
  2. From the drop-down menu under Clear, pick all history.
  3. Confirm with Clear History.Clear cookies and website data from Safari

Reset Safari if the above-mentioned steps did not help you:

  1. Click Safari > Preferences…
  2. Go to Advanced tab.
  3. Tick the Show Develop menu in menu bar.
  4. From the menu bar, click Develop, and then select Empty Caches.Reset Safari

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. It is a hassle when your website is protected from suspicious connections and unauthorized IP addresses.

The best solution for creating a tighter network could be a dedicated/fixed IP address. If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for server or network manager that need to monitor connections and activities. This is how you bypass some of the authentications factors and can remotely use your banking accounts without triggering suspicious with each login. 

VPN software providers like Private Internet Access can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world. It is better to clock the access to your website from different IP addresses. So you can keep the project safe and secure when you have the dedicated IP address VPN and protected access to the content management system.

Recover files after data-affecting malware attacks

While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files. More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.

Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, Data Recovery Pro can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection. 


About the author
Linas Kiguolis
Linas Kiguolis - Expert in social media

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Linas Kiguolis
About the company Esolutions

Removal guides in other languages

  1. adam says:
    March 15th, 2017 at 12:47 pm

    screw tech support scammers! they are fools that do not know what to do with their lives! pure cyber criminals!

  2. JosieP says:
    March 15th, 2017 at 12:48 pm

    I am so glad that i didnt call that number..

  3. Genevieve says:
    March 15th, 2017 at 12:49 pm

    ///Malicious Prnographic Spyware/Riskware Detected// oh lord:d what a foolish way to swindle money from naive computer users. I just simply cannot believe how imprudent tech support scammers are!

  4. leon says:
    March 15th, 2017 at 12:50 pm

    damn tech support scammers. saying theyre from microsoft and stuff. lol.

Your opinion regarding “Microsoft Warning Alert” Tech support scam virus