Remove Fake Antivirus and Scareware

Fake antivirus software — also called scareware or rogue security software — looks like a real security product but exists solely to frighten you into handing over money or personal details. The good news: it can almost always be removed for free.

How to Spot Fake Antivirus Software

• It appeared without you deliberately installing it (often bundled with something else)
• It immediately shows alarming scan results with many "threats" — even before running a scan
• Every button or option leads to a payment page
• It blocks you from opening Task Manager, your real antivirus, or websites
• It looks like Windows Security but has a different name or logo you don't recognise
• The "threats" it lists are vague or use names that don't match real malware families

How to Remove It

Step 1: Disconnect from the internet

This prevents the software from downloading more components or contacting its servers.

Step 2: Try to uninstall it normally

Go to Settings > Apps > Installed apps and look for any programme you don't recognise or didn't deliberately install. Click it and choose Uninstall.

Step 3: Restart in Safe Mode and scan

If the programme won't uninstall or keeps interfering:

1. Press Windows + R, type msconfig, and click Boot > check Safe boot > OK.
2. Restart your computer. It will start in Safe Mode where most malware can't run.
3. Open Windows Security and run a Full scan.
4. After removal, go back to msconfig and uncheck Safe boot, then restart normally.

Step 4: Run an offline scan

For stubborn cases, in Windows Security go to Scan options > Microsoft Defender Antivirus (offline scan). This scans before Windows fully loads, making it much harder for malware to hide or interfere.

Step 5: Remove browser remnants

Check your browser extensions and remove anything unfamiliar. Also check your browser's homepage and default search engine settings in case they've been changed.

If you're still stuck after these steps, ask us and we'll walk you through it.