Why Does My Browser Keep Saying I Have a Virus?

 · By

Your browser is open, and a warning suddenly appears: "Your computer is infected with a virus." It may be flashing red, playing an alarm sound, or telling you to call Microsoft support immediately.

You close the warning. A few minutes later, another one appears.

Perhaps the strangest part is that the messages can keep coming even when you are no longer visiting the website where they started.

Does this mean your computer really has a virus?

Not necessarily. The warning might be a deceptive webpage, a notification from a website you previously allowed, or a genuine alert from your security software. These situations can look similar, but the correct response is different.

The most useful clue is not how frightening the message looks. It is where the warning came from.


Older adult checking a suspicious security warning on a laptop before taking action.

Where Did the Warning Come From?

Before trying to remove anything, compare what you see with these three situations.

What you see Likely source What to do
A warning fills a browser tab and demands a phone call or payment. A potentially fraudulent webpage Avoid its buttons and phone number. Close the page safely.
Small virus warnings repeatedly appear near the corner of your screen, sometimes when the website is closed. Website notifications Check which site has notification permission and block suspicious senders.
A security alert appears in Windows and is also confirmed inside Windows Security. A genuine security detection may be present. Follow the security application's instructions and run a scan as appropriate.

Important: Appearance alone cannot prove whether a warning is genuine. A scam can imitate a Windows notification, and an actual infection can exist alongside fake warnings. This table is a starting point, not a diagnosis.

A Browser Tab That Claims Your Computer Is Infected

Imagine that you are reading the news when a page suddenly displays this message:

Illustrative scam message — not a real security warning:
"Critical virus detected. Your personal files are at risk. Call technical support now to prevent your computer from being locked."

The message might show a familiar company logo, use official-looking colours, or play a loud sound. It could even imitate a computer security scan.

But a website does not gain the ability to scan your entire computer merely because you opened the page. A webpage may display claims about viruses without having examined your device.

The Federal Trade Commission warns that genuine security pop-up messages from technology companies do not ask you to call a telephone number to resolve a supposed infection.

That makes a phone number inside an unexpected virus warning an especially serious warning sign.

How to leave the suspicious page

Do not click the warning's "Clean Now," "Remove Virus," or "Call Support" buttons. Even a button labelled "Cancel" may be part of the webpage.

  1. Try closing the affected browser tab using the normal tab-close button or Ctrl + W on a Windows computer.
  2. If the page has taken over the full screen, press Esc to leave full-screen mode, then close the tab.
  3. If the browser remains stuck, close the browser using Alt + F4. If necessary, open Windows Task Manager with Ctrl + Shift + Esc, select the browser, and choose End task.
  4. When reopening the browser, do not restore the suspicious tab or window if the browser offers to reopen the previous session.

These steps close the suspicious content. They do not establish whether malware has been installed. If you downloaded a file, installed software, or gave someone remote access, follow the additional precautions later in this guide.

Why the Warnings Return After You Close the Website

Here is a different situation.

You visited a website days ago. It asked, "Allow notifications?" You clicked Allow, perhaps because you thought it was necessary to continue reading.

Now a message appears near the corner of your desktop:

Illustrative website notification:
"Virus protection expired. Multiple threats found. Click here to renew protection."

This message may be coming from the website's notification permission rather than from your antivirus software.

Website notifications are a legitimate browser feature. News websites, calendars, and other services use them to send updates. But deceptive websites can misuse the same feature to send frightening security messages.

Some notifications can appear even when the original website is no longer open. Microsoft notes that permitted website notifications in Edge may appear even when the Edge browser itself is closed.

The practical difference: Closing a webpage removes what is on that webpage. Revoking notification permission stops that website from sending future notifications through the browser.

Stop Fake Virus Notifications in Chrome, Edge, or Firefox

The following instructions apply to desktop versions of these browsers. Menu wording may vary slightly with browser updates.

Google Chrome

  1. Open Chrome.
  2. Select the three-dot menu in the upper-right corner and choose Settings.
  3. Open Privacy and security → Site settings → Notifications.
  4. Find the websites under Allowed to send notifications.
  5. For a suspicious or unrecognized website, change its permission to Block or remove the permission, using the available site controls.

Review the website addresses carefully. You may recognize a legitimate calendar or news service and wish to keep its notifications. The goal is to remove untrusted senders, not automatically disable every useful notification.

Google's official instructions are available in Chrome's notification settings guide.

Microsoft Edge

  1. Open Edge and select the three-dot menu → Settings.
  2. Navigate to Privacy, search, and services → Site permissions → All sites. Some versions may display these settings under an All permissions menu.
  3. Select a website you do not trust.
  4. Find Notifications and set its permission to Block.

You can also manage a site's notification permission from the site-information control beside the address bar when that website is open. Do this only if you can visit the site safely; there is no need to reopen a suspicious page.

Microsoft provides current details in Manage website notifications in Microsoft Edge.

Mozilla Firefox

  1. Open Firefox and select the menu → Settings.
  2. Choose Privacy & Security.
  3. Scroll to Permissions.
  4. Next to Notifications, select Settings.
  5. Find the suspicious website, change its status to Block, and select Save Changes.

Firefox also allows you to remove a website's permission if you would prefer that the website ask again in the future. Blocking is more appropriate for a site you do not trust.

See Mozilla's Web Push notifications guide for the latest instructions.

What if the warnings still appear?

Website notifications and browser pop-ups are different settings. If blocking notifications does not solve the problem, check the browser's Pop-ups and redirects permissions and remove any suspicious websites from its allowed list.

If the browser opens unfamiliar pages, changes your homepage or search engine, or repeatedly adds unwanted extensions, the problem may be more than notification permission. At that point, investigate unwanted software and run a security scan rather than simply turning off more alerts.

Google discusses these additional symptoms in Remove unwanted ads, pop-ups and malware.

How to Check Whether Windows Actually Found a Virus

A convincing fake warning can look almost identical to a real one. Rather than trusting what the popup tells you, check your computer's security status independently.

On a Windows 10 or Windows 11 computer:

  1. Open the Start menu.
  2. Type Windows Security and open the Windows Security application from your computer.
  3. Choose Virus & threat protection.
  4. Review the current security status and any reported threats or recommended actions.
  5. If appropriate, select Quick scan to check for common threats.

If Windows Security reports that a threat needs attention, follow the instructions inside the security application. If you use another recognized antivirus product, Windows Security may identify that provider instead of showing all Microsoft Defender controls.

A clean quick scan is reassuring, but it does not prove with absolute certainty that your computer is free of every threat.

Microsoft explains how to open Windows Security and run scans in its Windows Security protection guide.

Never turn off your real antivirus protection just because a webpage instructs you to do so.

The Same Warning, Three Different Outcomes

Consider three hypothetical situations involving the same frightening message: "Virus detected."

Case 1: The warning disappears when the tab closes.

You close the page, and nothing else happens. Windows Security reports no detected threats. This is consistent with a deceptive webpage, although it cannot independently rule out infection.

Case 2: The warning keeps appearing near the desktop clock.

You find an unfamiliar website in the browser's allowed notification list. You block that site, and the messages stop. This supports the explanation that the website was sending misleading notifications. The warning itself was not evidence that your antivirus had detected a virus.

Case 3: Windows Security independently reports a threat.

You open Windows Security from the Start menu, and it identifies a file needing attention. This requires you to address an actual security detection, regardless of whether a suspicious webpage was also involved.

These examples are illustrative, not results from testing three infected computers. Their purpose is to show why the source of the warning matters more than its wording.

What If You Already Clicked the Warning?

The next action depends on what happened after the click.

What happened What to do next
You only opened the suspicious page or clicked a warning, but did not install anything or share information. Close the page, review browser notification permissions, and consider a security scan. A click alone does not prove that your device is infected.
You downloaded or installed a program. Do not run the downloaded file if you have not opened it. Use trusted security software to scan the device, and investigate any unfamiliar installed application.
You entered a password or verification code. Use the genuine service's website or app to secure the account. Change the affected password and review account activity and sign-in protection.
You allowed someone to control your computer remotely. Disconnect the remote session and internet connection, stop sensitive account activity on that computer, and arrange a trusted security assessment before using it for banking or important accounts.
You gave payment details or paid for a fake repair. Contact your bank or card issuer through its official contact channel, explain the incident, and ask about card protection or disputing unauthorized or fraudulent charges.

If you shared account credentials, it may also be time to review how two-factor authentication protects your accounts. Use a different trusted device to change sensitive passwords if you believe the original computer may be compromised.

For fuller recovery guidance, see the FTC's advice on tech support scams.

When a Warning Deserves More Attention

Do not assume every warning is fake just because you have seen a fraudulent one before.

Further investigation is warranted if your antivirus independently detects a threat, you installed unfamiliar software, your browser keeps redirecting to unknown websites, your security settings change unexpectedly, or you notice unauthorized account activity.

Likewise, do not buy an unfamiliar security product simply because a popup claims your subscription has expired. Confirm any subscription status by opening the security provider's application or official account website yourself.

One useful principle applies across all these situations: verify a warning through a trusted tool that you opened independently, not through the button, phone number, or link supplied by the warning itself.

A browser message may demand immediate action. Your computer's own security application gives you a separate place to investigate what is actually happening.

That distinction helps you avoid two different mistakes: trusting a scam, and ignoring a real threat.

Official Sources and Further Reading

Popular posts from this blog

How to Create a Strong Password You Can Actually Remember

Image
A password can look complicated and still be a poor password. Many of us were taught that a strong password needs capital letters, numbers, symbols, and something difficult to remember. That advice has led to plenty of passwords that look impressive but are short, predictable, or reused across several accounts. A better goal is simpler. Make the password long, make it difficult for someone else to predict, and use it for only one account. Current security guidance places much more emphasis on length and uniqueness than on making a password look complicated. If a website requires a capital letter, number, or symbol, follow the rule—but do not let that distract from the things that matter more. Start With Length Short passwords give an attacker fewer possibilities to work through. That is one reason current NIST guidance recommends using at least 15 characters when you create a password yourself. You do not need to make those 15 characters look like computer code. The ...
Read more

How to Find Old Text Messages on iPhone and Save What Matters

Image
You know the information is somewhere in your iPhone. Maybe it is the address from a medical appointment three months ago. A hotel confirmation from last summer. A restaurant your daughter recommended. Or a photograph someone sent that you meant to save. The problem is that you may have hundreds—or thousands—of messages. Scrolling backward through an entire conversation is usually the slowest way to find what you need. A better approach is to think about it in three simple steps: Find it. Verify it. Preserve it. That middle step matters more than most people realize. An old message can be perfectly genuine and still no longer be the right information to use. An appointment may have been rescheduled. An address may have changed. A later message may have replaced the first one. So the goal is not just to find an old text. It is to find the right one and save it in a way that will still make sense later. Finding an old message is easier when you know what to...
Read more

How to Tell If a Text Message Is a Scam

Image
A text message arrives on your phone. It says you have an unpaid toll. Or a package cannot be delivered. Or your bank has detected suspicious activity. There is usually a link. And often there is a reason to act quickly. That combination should make you stop for a moment. Scam text messages can look surprisingly convincing. They may use the name of a bank, delivery company, government agency, or another organization you recognize. You do not need to become a cybersecurity expert to recognize many scam texts. Most still rely on a few familiar techniques: surprise, urgency, trust, and pressure to act before you verify. This guide focuses on practical warning signs and simple habits that can help adults 50+ recognize suspicious text messages before clicking, replying, or sharing information. What Is a Scam Text Message? A scam text is a message designed to trick you into doing something that benefits the sender. That might mean: Clicking a fake link Giving away a...
Read more