What is “VIRUS ALERT FROM MICROSOFT” scam? And how does it work?

“VIRUS ALERT FROM MICROSOFT” is yet another tech support scam meant to trick users into thinking that their computer is infected with a virus to make them call a fake tech support number. When you encounter this kind of scam, you will see the following message on your browser:
“VIRUS ALERT FROM MICROSOFT
This computer is BLOCKED
Do not shut down Your Computer and restart your computer
Your computer’s registration key is Blocked.
Why we blocked your computer?
Your Computer’s registration key is illegal.
Your Computer is using pirated software.
Your Computer is sending virus over the internet.
Your Computer is hacked or used from undefined location.
We block this computer for your security.
Contact Microsoft helpline to reactivate your computer.
Text presented in the malicious website:
Your Computer is permanently blocked.
System Security Alert
Your information (for example, passwords, messages and credit cards) are been extracted from your Device. Call Microsoft
at – to protect your files and identity from misuse, Please do not try to close this page or your Device will be disabled to
protect your data.”
How does “VIRUS ALERT FROM MICROSOFT” scam circulate the web?
“VIRUS ALERT FROM MICROSOFT” scam circulates the web through misleading advertisements over the web. However, you could also keep on getting this fake alert when there is an adware program installed in your computer. Adware travels the web through software bundles that are distributed on free sharing sites or peer-to-peer networks. The adware can get installed when you use the quick or standard setup rather than the recommended Custom or Advanced setting. So the next time you install these kinds of packages, installing them using the recommended setting is a must.
Follow the removal guide laid out below to get rid of the “VIRUS ALERT FROM MICROSOFT” scam from your PC.
Step 1: Tap F11 to exit if your browser is forced into full screen mode due to the “VIRUS ALERT FROM MICROSOFT” scam.
Step 2: After that, try to close the browser manually. If you find it hard to do so, close the browser through the Task Manager.
Step 3: Tap the Ctrl + Shift + Esc keys to launch the Task Manager.
Step 4: After opening the Task Manager, go to the Processes tab and look for the affected browser’s process and end it by clicking End Task or End Process.

Step 5: Close the Task Manager and reset all the affected browsers to default.
Internet Explorer

1. Open Internet Explorer.
2. Tap Alt + T and select Internet options.
3. Click the General tab and then overwrite the URL under the homepage section.
4. Click OK to save the changes.
5. Now switch to the Advanced tab and click the Reset button.
6. Then check the box for “Delete personal settings” and then click Reset again.

Google Chrome

1. Launch Google Chrome, press Alt + F, move to More tools, and click Extensions.
2. Look for Search.hyourweatherinfonow.com or any other unwanted add-ons, click the Recycle Bin button, and choose Remove.
3. Restart Google Chrome, then tap Alt + F, and select Settings.
4. Navigate to the On Startup section at the bottom.
5. Click on Advanced.
6. After that, click the Reset button to reset Google Chrome.

Mozilla Firefox

1. Open the browser and tap Ctrl + Shift + A to access the Add-ons Manager.
2. In the Extensions menu Remove the unwanted extension.
3. Restart the browser and tap keys Alt + T.
4. Select Options and then move to the General menu.
5. Overwrite the URL in the Home Page section.
6. Tap Alt + H to access Help.
7. Next, select “Troubleshooting information” and click “Refresh Firefox” at the top of the page.
8. Now click “Refresh Firefox” again to confirm the reset.

Step 6: Tap the Win + R keys to open Run and then type in appwiz.cpl to open Control Panel to uninstall the adware program behind the fake alert.
Step 7: Look for the adware program or any unfamiliar program under the list of installed programs and once you’ve found it, uninstall it.

Step 8: Close the Control Panel and tap the Win + E keys to open File Explorer.
Step 9: Navigate to the following directories and look for the adware installer like the software bundle it came with as well as other suspicious files and delete them.

• %USERPROFILE%\Downloads
• %USERPROFILE%\Desktop
• %TEMP%

Step 10: Close the File Explorer and empty your Recycle Bin.
To make sure “VIRUS ALERT FROM MICROSOFT” scam is completely eliminated as well as the adware program behind it, follow the advanced steps below:
Perform a full system scan using SpyRemover Pro. To do so, follow these steps:

1. Turn on your computer. If it’s already on, you have to reboot
2. After that, the BIOS screen will be displayed, but if Windows pops up instead, reboot your computer and try again. Once you’re on the BIOS screen, repeat pressing F8, by doing so the Advanced Option shows up.

3. To navigate the Advanced Option use the arrow keys and select Safe Mode with Networking then hit
4. Windows will now load the SafeMode with Networking.
5. Press and hold both R key and Windows key.

6. If done correctly, the Windows Run Box will show up.
7. Type in explorer http://www.fixmypcfree.com/install/spyremoverpro

A single space must be in between explorer and http. Click OK.

8. A dialog box will be displayed by Internet Explorer. Click Run to begin downloading the program. The installation will start automatically once a download is done.

9. Click OK to launch it.
10. Run SpyRemover Pro and perform a full system scan.

11. After all the infections are identified, click the REMOVE ALL button.