Time-sensitive. If you are mid-incident, do the first 1-2 self-help steps below immediately, then book a session.
Security · Fix
"Microsoft Security Warning" Popup? It's a Scam — We'll Verify
A "Microsoft Security Warning" popup with a phone number to call is a scam — full stop. Microsoft does not show these. Apple does not show these. Your antivirus does not show these. The popup itself does not infect your computer; you got it from a malicious ad or website. Reading it does nothing. The risk is only if you called the number or installed software they told you to install. If either of those happened, we can verify the damage and remove anything they planted in a single 30-minute session — and we will be straight with you about whether the machine is actually compromised or just scared you.
$150 $79 per 30-minute session · No contract · You watch every action
Fast response
Typical response within minutes during business hours.
Encrypted CyberDesk session
End-to-end encrypted. Removable at session end. You watch the whole time.
No contract, no upsell
$79 for the session. If we cannot help, we tell you upfront.
Try this first
Real, useful steps to try before you book. If they do not resolve it, the next sections explain what is actually wrong and how a remote session fixes it.
- 1
Close the popup — do not call the number
Close the browser tab or window. If the popup will not close, force-quit the browser (Task Manager on Windows, Cmd+Option+Esc on Mac). Do not interact with anything in the popup.
- 2
Do NOT call the number on the popup
The number connects to scammers pretending to be Microsoft / Apple / your security company. They will try to get you to install remote-access software, hand over passwords, or pay a "support fee".
- 3
If you DID call them, write down what you did
Did you install software they pointed you to? Did you give them remote access? Did you give a credit card? This determines what kind of compromise we are dealing with.
- 4
If you gave them payment info, alert your bank now
Call the number on the back of your card. Cancel the card. Watch for fraudulent charges over the next month. The scammers may also have your name, address, and phone — be cautious of follow-up scam calls.
What is actually going wrong
These popups appear because of malicious ads ("malvertising") served on otherwise legitimate websites, sketchy ad networks on free streaming or download sites, browser hijacker extensions, or — occasionally — push-notification subscriptions you accidentally accepted from a sketchy site. The popups themselves are designed purely to scare you into calling the phone number. They cannot install malware just from being shown. The actual damage happens AFTER you call: scammers walk you through installing remote-access tools (AnyDesk, TeamViewer, LogMeIn), then plant real malware, search your computer for valuable data, or charge you "support fees" for fake "viruses" they show you using common Windows commands. Some scammers also do nothing technically harmful but charge $200-$2000 for fake support and disappear. Either way, the popup itself is the alarm — the call is the actual breach.
What we do in a 30-minute session
Your tech connects through CyberDesk and runs a structured check: did the scammer install anything (review installed programs, scheduled tasks, startup entries, services for the past few days)? Is any remote-access software still running or installed? Did they leave any persistence mechanisms? Are there any new accounts or modified passwords on your local machine? We also check your browser for malicious extensions, pop-up settings, and cleared push notifications that might still be triggering popups. If we find scammer tools, we remove them and harden the machine. If everything is clean — which it often is when people closed the popup without calling — we tell you that explicitly so you stop worrying.
CyberDesk encrypted remote session
One-click connect. No software stays on your machine after the session unless you choose to keep it.
You stay in control
See your screen the whole time. End the session in one click. We document what we did when the session ends.
Why trust us with this
Important: WE ARE NOT THE SCAM. CyberITEX is a real managed security service provider. You came here by searching, not by a popup telling you to call us. Our verification: real address (Sheridan, WY), real phone (+1-970-460-8020), real BBB-style citations. Any "Microsoft" or "Apple" tech popup is a scam — even if the popup mentions a different company name, it is the same scam. Same $79 / 30-minute pricing as standard sessions.
FAQ
I just saw the popup but did not call. Am I infected?
Almost certainly not. The popup is only the alarm; you needed to call them and follow their instructions for actual compromise. Close the tab, clear your browser data, and you are likely fine. We can verify in a session if you want certainty.
I called and gave them remote access. Now what?
Get on a session with us today. We need to identify what they installed, remove it, change passwords for any accounts you signed into during their session, alert your bank if you gave payment info, and harden the machine. This is fixable but the speed of response matters.
They charged me money for "fixing" my computer. Can I get it back?
Maybe — call your card issuer and dispute the charge as fraud. Most card companies treat tech-support scams as recoverable fraud, especially within 60 days. We can help you describe what happened in your dispute.
Will the popup come back?
If you got it from a sketchy website, possibly. We help by removing any browser extensions or push notifications that might be triggering it, and by recommending an ad blocker that prevents 99% of malvertising popups going forward.
How do I know YOU are not a scam too?
Fair question. We have a real US address, a real phone number, real customer reviews, real social media, and we are a managed security service provider — not a popup or a cold call. You came to us by searching, which is the right way to find help. If anything we do feels off, you can end the session in one click. The session is recorded and you keep a copy.
Related fixes
Browse allSecurity
Think You've Been Hacked? Lock It Down in Under an Hour
Suspect a hack, ransomware, or compromised account? Get a CyberITEX security tech on the line now. $79 / 30-min remote response.
Fix itSecurity
Ransomware Attack? Don't Pay — Call Us First
Files encrypted by ransomware? Get a CyberITEX security tech immediately. We contain, recover where possible, and prevent re-infection. $79 / 30-min.
Fix itAccount
Locked Out of Your Microsoft Account? Recover Access Fast
Cannot get into Microsoft 365 / Outlook / Teams? CyberITEX walks you through the right recovery path. $79 / 30-min remote session.
Fix itReady to get this fixed?
Send us a quick description and a CyberITEX technician will respond fast. $79 per 30-minute session, no account or contract required.