Windows Defender Browser Protection: what it is and how to remove it

Windows Defender Browser Protection is a fake notification that users may encounter while browsing the web on Google Chrome, Mozilla Firefox, Internet Explorer, or another browser. As soon as they enter a malicious website (which they might have been redirected to from another site or due to adware infection), they are informed that the banking account information is in danger of being stolen, but the intrusion was supposedly stopped.

Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

Not sure whether the caller at +1 (578) 844-2039 installed anything? An automatic scan looks through programs and startup items for you.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Windows Defender Browser Protection yourself 3 steps, about 9 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla FirefoxSafari (Mac)

Windows Defender Browser Protection: pop up tech support scam
Windows Defender Browser Protection as our 2020 report showed it.

Windows Defender Browser Protection: summary

DistributionOnline scams can be populated on any type of websites that users get redirected to by clicking a suspicious ad on another site or get redirected by adware which is secretly installed on their systems
NameWindows Defender Browser Protection
TypeTech support scam, online fraud message
ContentThe message claims that Mozilla Firefox has detected malware on user's machine and that sensitive information is in danger until the call is made to an alleged Microsoft technician at +1 (578) 844-2039 (note: number may vary)
Associated risksMoney loss, sensitive information lead to malicious parties, installation of malware, identity theft
Error code displayedSystem_Protect_-_PROTECT_ERROR_0xEB4748216
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 10 more facts
TerminationSimply because you see a Windows Defender Browser Protection scam message, it does not mean your machine is infected, although you should close down the tab that displays the alert immediately. However, you should make sure that adware is not involved – scan your machine with anti-malware or check our manual removal guide below
Detection namesNo Microsoft detection name is known
DamageNot recorded in the old report
SymptomsA fake virus warning in a browser tab and a support phone number shown on screen
Evidence5 write-ups by security sites; details still limited
ImitatesMicrosoft support
Domainsapple[.]com-clean-os[.]live
Phone number+1 (578) 844-2039
First seen1 October 2020
Facts checked6 October 2026

Is the Windows Defender Browser Protection warning real?

  • Address: apple[.]com-clean-os[.]live
  • Phone number: +1 (578) 844-2039

What the Windows Defender Browser Protection scammers want

From our report of Oct 2020 · not reviewed since

Windows Defender Browser Protection is a fake alert that attempts to imitate a legitimate Microsoft protection tool

Windows Defender Browser Protection is a fake notification that users may encounter while browsing the web on Google Chrome, Mozilla Firefox, Internet Explorer, or another browser.

As soon as they enter a malicious website (which they might have been redirected to from another site or due to adware infection), they are informed that the banking account information is in danger of being stolen, but the intrusion was supposedly stopped.

However, Windows Defender Browser Protection red screen also claims that users' sensitive information is still in danger and that they should contact the tech support at +1 (578) 844-2039 help desk (although keep in mind that this number might vary).

Under no circumstances call the provided number, as the person who picks up the phone will try to convince you that your machine is in grave danger due to some alleged malware infection.

As evident, Windows Defender Browser Protection popup is just an online scam designed to trick you into paying fake tech support fees for crooks. Nevertheless, if you encounter the notification often, you should check your system for adware.

The misconception about Windows Defender Browser Protection alert being legitimate comes from the name itself - it is Microsoft's legitimate application. Nonetheless, since the release of Chrome-based Edge in January 2020, the tech giant discontinued the distribution and support of the tool. Hence, if you see any alerts mentioning its name, it's a scam - do not respond to it and call the cybercriminals.

Initially, Windows Defender Browser Protection is a legitimate extension developed and released by Microsoft as a tool that could stop users from entering malicious websites and those of dubious content. The extension principle is simple: it blocks all the URLs that are included in Microsoft's database, including the ones that push the fake Windows Defender Browser Protection red screen alert.

Therefore, those who never installed Windows Defender Browser Protection on their web browsers in the first place should be wondering why they see notifications from this app. The truth is that everything compiled on the alert is fake and not genuine. In fact, the Windows Defender Browser Protection popup is riddled with grammar and spelling mistakes, as well as various inconsistencies from a technical point of view, for example:

Aside from these traits of Windows Defender Browser Protection scam, you should also be aware that Microsoft (or Mozilla) would never provide a contact number. For that, error codes are used, and the legitimate tech support has other means (such as email) to contact its users.

Finally, you should always remember that every single message that claims your computer is infected with viruses is bogus, as it is virtually impossible to detect malware via the browser unless a remote connection is established to the device.

Speaking of which - if you would call scammers behind Windows Defender Browser Protection alert, they would most likely ask you to allow them to connect to your computer remotely via TeamViewer or similar software.

After that, crooks would show you various files or connections that are allegedly made by cybercriminals, and that their tech support would take care of the matter, only after payment is made, of course.

In some cases, the criminals could ask you for as much as $1,000 for their "services." Therefore never engage in any talks with these scammers and simply remove Windows Defender Browser Protection popup message by closing down the malicious site that is showing you the red screen notification.

Nevertheless, Windows Defender Browser Protection removal might not be over yet, even if this is the first time you encountered this fake alert. You should still check whether your system is clear from adware - this software is often to blame for redirects, banners, offers, coupons, and other potentially malicious content being displayed to you.

To get rid of adware, which leads to dangerous sites displaying Windows Defender Browser Protection scam, you should check the installed application list and uninstall everything suspicious. In other cases, the culprit could be a browser extension, in case of which you should reset your installed browsers.

  • Windows Defender Browser Protection is a name of an extension, which would limit the credibility of the fake pop-up to those who actually have it installed;
  • The mentioned "Stop code" suggests that Mozilla Firefox has detected malware (regardless of which browser is used), while the phone number of the alleged support belongs to Microsoft;
  • Constant vague statements about the alleged malware infection: at some points in the Windows Defender Browser Protection error message it is claimed that the alleged virus has been stopped, while only a few sentences later, the user is informed that danger is not gone at all. So which one is it?
Windows Defender Browser Protection: pop up tech support scam
Windows Defender Browser Protection in our 2020 report.
Windows Defender Browser Protection: fake alert scam
Windows Defender Browser Protection in our 2020 report.

From our report of Oct 2020 · not reviewed since

Social engineering is a tool that help crooks earn millions each year - don't fall a victim

Online scams are incredibly prevalent; there are multiple stories online on how the law enforcement managed to stop another Indian-based call center that specializes in scamming users.

However, the sad truth is that all of these crooks will never be stopped, and online fraud will continue - unless the internet shuts down globally for some reason, which is highly unlikely to happen.

Therefore, the best way to protect yourself from online scams is to learn about them as much as possible. As we previously mentioned, threat actors often use familiar names such as Microsoft or Google in order to make users believe that the message is legitimate. Also, fake alerts often include bogus claims about virus infections and are riddled with various mistakes.

Additionally, one more important note that could help you to detect scams is the domain name which the alert is displayed from - these often are completely unrelated to Microsoft, Apple, or other reputable companies. Nevertheless, you should be aware that crooks might incorporate these words within a bogus URL, such as Apple.com-clean-os.live.

While knowing about scams is important, it is best not to encounter them in the first place to avoid confusion.

For that, you should avoid all the potentially unwanted programs by carefully installing apps from third-parties (remove ticks from pre-ticked boxes, read fine print, watch out of misleading deals, and always pick Advanced installation settings instead of Recommended when prompted), and also install security tools that could aid you with computer and browser protection - anti-malware, firewall, and the ad-blocker.

Windows Defender Browser Protection: attacks edge mozilla firefox
Windows Defender Browser Protection in our 2020 report.

How to get rid of the Windows Defender Browser Protection pop-up

The warning is a web page and your PC is not infected by it.

Close it, then remove what keeps bringing it back.

Which browser shows the ads?

  1. Step 1: Remove apple[.]com-clean-os[.]live from Chrome's notification list

    Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste chrome://settings/content/notifications into the address bar.

    Under Allowed to send notifications, open the menu next to apple[.]com-clean-os[.]live and choose Remove or Block, and do the same for any other address you do not recognise.

    Next to Not allowed to send notifications, click Add and enter apple[.]com-clean-os[.]live, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Instructions for Google Chrome

Remove from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Then, whichever browser you use

  1. Step 2: Close the page without touching its buttons

    The warning is a web page, not Windows, so closing the browser ends it. If the page blocks the browser or goes full screen, press Esc first, then end the browser in Task Manager (Ctrl + Shift + Esc). Start the browser again without restoring the session.

    Warning: Do not call +1 (578) 844-2039 and do not let anyone connect to the PC: the people behind it sell fake repairs.

    On Windows 11 and Windows 10 the steps are identical.

    Full procedure with screenshots: Close a frozen app (Task Manager, Force Quit) On uGetFix

  2. Step 3: Scan the PC, then run the offline scan

    Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.

    Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

More removal instructions

For programs installed on the PC and older browsers. Open the one you need.

Get rid of Windows Defender Browser Protection root cause - adware

While there is no rule that you are definitely infected with the Windows Defender Browser Protection virus (namely, adware), you should be cautious, as PUPs often travel within software bundles, which hinders users' ability to stop them on time before they are installed automatically. As mentioned above, you should never rush while installing freeware from third-parties.

Therefore, to remove Windows Defender Browser Protection related adware, you should either check the installed program list and uninstall everything suspicious or make use of anti-malware software. Note that not all security software can detect potentially unwanted programs, so you should employ one that has the feature or specializes in PUPs.

Finally, if you called cybercriminals and provided them with any type of sensitive information, you should think of preventive actions to protect yourself:

  • contact your bank and explain that you have been scammed online
  • change your passwords
  • report the encounter to your local authorities that handle fraud
Uninstall from Windows

To remove adware that brought you to Windows Defender Browser Protection scam site, follow these steps:

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows
Reset Internet Explorer

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.

Avoid any unwanted government tracking or spying by going totally anonymous on the internet.

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings.

Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.

Questions about Windows Defender Browser Protection

Is +1 (578) 844-2039 a real Microsoft support number?

No. Microsoft does not put phone numbers in warnings, pop-ups or error messages, and its support never calls you first about a virus. The number +1 (578) 844-2039 is used by a scam call centre that pays for traffic to fake warning pages.

If you need help from Microsoft, go to support.microsoft.com yourself and start from there. Never use a number that appeared in a pop-up, an unexpected e-mail or a search ad that looks like a support listing. If you already called, follow the steps in this guide for callers:

  • remove any remote tool
  • change passwords from another device
  • contact the bank if you paid

I called +1 (578) 844-2039 and let them connect. What now?

Act in this order. Disconnect the PC from the internet so the session ends. Uninstall the remote-access program they asked for, and check Installed apps for anything else added during the call.

From another device, change your e-mail and banking passwords and turn on two-step verification. If you paid or gave card details, call your bank today and ask to block the card and dispute the payment.

Watch for follow-up calls offering a refund; they are part of the same scam. Finally, report +1 (578) 844-2039 to the authorities in your country with the date and amount.

Is Windows Defender Browser Protection really from Microsoft support?

No. It is a web page made to look like a message from Microsoft support. Websites cannot scan your computer, see your files or know whether your antivirus is active. Real security warnings appear in Windows Security or in your antivirus program, not as browser pages with phone numbers, countdowns or prize wheels.

Close the page; nothing was installed just by seeing it. If you want to check, open Windows Security from the Start menu and run a quick scan. It shows the real status of your protection.

Is apple[.]com-clean-os[.]live safe?

No. The site apple[.]com-clean-os[.]live hosts Windows Defender Browser Protection, a page that imitates Microsoft support to scare or lure visitors. Do not open it again to check; the content can change between visits and may include downloads. If you see it once, close the tab.

If it opens by itself, a notification permission, an extension or a redirecting site is sending you there; the steps in this guide remove each of these. You can report the address to your browser so that others get a warning page before it loads.

I called +1 (578) 844-2039. What should I do?

If you only talked, hang up and do not call back. The number +1 (578) 844-2039 belongs to the scammers behind Windows Defender Browser Protection, not to Microsoft support. If you let them connect to your PC, disconnect from the internet, uninstall the remote access program they used and run a full and offline scan.

Change passwords you typed during the call from a clean device. If you paid or gave bank details, call your bank at once. Report the number and expect refund calls later; they are part of the same scam.

How do I check my real Microsoft support protection status?

Open the program itself, not a web page. For Microsoft Defender, open Windows Security from the Start menu and look at Virus & threat protection. For a paid antivirus, open its window from the Start menu or the system tray; subscription status and recent scans are shown there.

If you want to see your account or licence, sign in on the vendor's site by typing the address yourself. Pages like Windows Defender Browser Protection never show your real status, whatever logo they use. Only the program knows.

Why does Windows Defender Browser Protection keep coming back?

Most often because a site has permission to send notifications, and those notifications lead to new scam pages. Remove notification permissions for unknown sites. Other causes are an adware extension, a browser that restores the previous session, or a site you visit often that shows such ads.

If the page appears outside the browser, a program on the PC is responsible; check Installed apps. If you cannot find the source, resetting the browser removes all of these causes at once.

Is my computer infected?

Seeing the page does not mean the PC is infected. You reached it through an ad, a redirect or a notification. Check whether something on the PC sends you there: if the page opens by itself or on every site, look for extensions and notification permissions, and run a scan.

If you downloaded or ran something the page offered, treat the PC as possibly infected and follow the plan. A full scan with Windows Security gives you a clear answer either way.

How did Windows Defender Browser Protection find me?

It did not target you personally. Pages like this buy traffic from shady ad networks and from hacked sites, and they show A warning that tells you to call +1 (578) 844-2039 to whoever is redirected to them.

Mistyped addresses, streaming and download sites, and earlier clicks on Allow for notifications are the most common entry points. Nothing about your PC was scanned or known in advance. Once you remove the trigger in the browser, the page has no way to reach you again unless you meet a similar ad.

Will Fortect remove Windows Defender Browser Protection?

Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.

For Windows Defender Browser Protection, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.

Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.

Sources

More removal guides

Remove Immediate Action Required

Immediate Action Required is a fake notification that might pop-up out of nowhere and prompt users to download useless bogus software Immediate Action Required is a scam that users mightAdwareMedium riskUgnius Kiguolis ·

Remove ReceiverHelper Mac virus

ReceiverHelper virus is a high threat to your personal safety and Mac security ReceiverHelper is a harmful application targeting Mac devices, classified under the Adload malware family. It is notoriousAdwareMedium riskJake Doevan ·

Remove Casalemedia

Casalemedia is a legal advertising service but is sometimes abused by crooks to gain personal income Casalemedia is a legitimate advertising service that provides assistance in monetizing on online contentAdwareMedium riskJake Doevan ·

Remove D1ue3yi0hkdsdl.cloudfront.net ads

D1ue3yi0hkdsdl.cloudfront.net ads is the content related to scam campaigns and fake errors or warnings D1ue3yi0hkdsdl.cloudfront.net is the program that causes notifications and advertisements that may appear unexpectedly, preventing you fromAdwareMedium riskJulie Splinters ·

Questions and experiences: Windows Defender Browser Protection

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year