Your computer is disabled. Please call Microsoft.

Please call Microsoft
Please call Microsoft
Written by Wilbur Woodham

“Your computer is disconnected. Please call Microsoft” is another scammer’s creation, a pop-up notification pretending to be a Microsoft support message. Although there is no question of blocking your computer, there is some truth in it. Such banners indicate malware in your system, potentially unwanted programs (PUPs). In this post, you will learn why following the instructions on this banner is a bad idea.

“Your computer is disabled. Please call Microsoft.” description

As I mentioned, this notification appears as a popup banner covering the browser’s content. There is no correlation between the websites you browse and the appearance of that banner. However, it states that your PC is blocked. Furthermore, the popup says that you got the malware after visiting pornographic websites:

Do not restart or use your computer.
Your computer is disabled. Please call Microsoft.
Access is the block security reason for this computer.
Please contact us immediately. A technician will help you solve the problem.

You can easily skip this message, which will not affect your computer. The only possible consequence if you close the window or restart your PC is a scarecrow. The virus shows you this message to make you call the specified number. Although it is presented as a Microsoft support contact number, it is not. You can quickly check Microsoft support methods on its official website. These scammers act similarly to another group of cybercriminals who use the FastSupport name.

The exact appearance of that popup alert

In some cases, an “alert from Microsoft” in the shape of a pop-up message may completely block your web browser. Using it in any possible method is impossible – the notification covers the whole window. Sometimes, that banner may cover the upper panel – The close cross and minimize buttons will not be pressable. In such cases, the only way to close the web browser is to kill the process in Task Manager.

A virus that causes pop-up ads is classified as adware. This type of malware profits its creators by displaying various ads to users who have installed it on their computers. Unfortunately, its symptoms are well known to all active PC users – ads are present on every page, even where they should not be, and ad blockers do not save the situation; the browser window opens automatically and will show you a flooded page with ads. So it’s hard to predict what will happen if you click on one of these banners. But, from all appearances, nothing good.

Why do they do it?

The developers of “Your computer is disabled. Please call Microsoft.” want money. To do this, they show you this annoying banner hoping that you will call the number given. During the call, the “tech support” will offer you to install several protections, depending on which ones were pre-paid to them. Of course, these anti-virus programs are more of a scareware than full-fledged protection against malware. They will show you numerous warnings about problems on your computer. The distinguishing feature of all such programs is that you must buy the full application version to fix all the issues found.

Usually, all of these “problems” are 100% fictional. Fake antivirus software can pick a random file and block it, saying it is vulnerable or malicious. Thus, it can easily block the file of a program you use every day, and it won’t start or will run with errors. Unfortunately, there is another side to the problem: many users trust these programs, buy them and use them in their daily activities. Consequently, its developers get an incentive and continue to develop their “antivirus”. Users who realize it is a malicious application face another problem: scareware programs are difficult to remove without a proper anti-malware tool. You won’t be able to find such antiviruses in the list of installed programs, and there is no uninstall.exe file in their root directory.

Besides installing potentially unwanted programs, scammers may perform various social engineering tricks. These can be targeted on your credentials, personal data, or even online banking information. Moreover, they generate profit for PUPs installation and ads it shows massively to its victims.

Is “Your computer is disabled. Please call Microsoft.” dangerous?

The virus can only be distracting and annoying because of mentioned popup banners and random ads that appear from nowhere. As I have described, the main danger is that you can be caught on this lure and install fake security tools. The activity of the last ones is not destructive but can harm your daily activities: it is hard to design something if your Photoshop and Lightroom are blocked.

sAntivirus blocked OracleVM and one of Microsoft files.

Some of the fake antiviruses, however, are not so “peaceful”. Different malware analysts say that such apps as SAntivirus, SAproduct or Segurazo Antivirus have several signs of being a well-disguised spyware1. It steals the information about the user’s PC configuration, data about the system settings and the most used applications. There is no need for the antivirus program to use this information, hence, it can only be used for malevolent purposes.

How did this virus reach my PC?

In the majority of cases, you get the “Your computer is disabled. Please call Microsoft.” malware through the malicious advertisements on the web2, or through the free/hacked programs you get on the Internet. You can avoid the first way of spreading easily – get rid of the habit of clicking the ads on websites. Yes, you can find something useful on them, but something like winning a prize in a lottery you haven’t taken part in or purchasing a new PC with a 90% discount is likely a scam.

Example of malicious advertisements

Software bundling is a widespread practice among the virus developers. Users who hack the programs to make them usable without purchasing a license approve any offer to include another program in the pack because they are gaining money in such away. Check precisely the installation window for signs like “Advanced installation settings” or so. The ability to switch off the malware installation often hides under such items.

How to get rid of “Your computer is disabled. Please call Microsoft.” malware?

The removal process of that virus includes the browser reset. It is better to use anti-malware software to remove the adware and reset the browser. Manure removal is also possible. However, this virus has several locations where it keeps its files. It also makes big changes to browser configurations, which are very hard to revert. My choice for “Your computer is disabled. Please call Microsoft.” removal is GridinSoft Anti-Malware.3.

Removing the viruses with GridinSoft Anti-Malware

  • Download and install the GridinSoft Anti-Malware. After the installation, you will be offered to perform the standard scan. Apply this action.
  • GridinSoft Anti-Malware during the scan process

  • Standard scan lasts up to six minutes and checks the system files together with the files of the programs you have installed on your computer.
  • GridinSoft Anti-Malware scan results

  • When the scan is complete, press “Apply” to wipe out the malicious items that are present on your PC.
  • Malware removing with GridinSoft Anti-Malware

    I hope this guide helped you get rid of this annoying banner. Share this article with your friends or colleagues who also got that virus. Good luck!

    When the virus is removed, it is time to deal with the consequences of its presence in your browser. Here are the guides for reverting to default for all popular web browsers.

    Reset browser settings to default

    Manual method of browser reset

    To reset Edge, do the following steps :
    1. Open “Settings and more” tab in upper right corner, then find here “Settings” button. In the appeared menu, choose “Reset settings” option :
    2. Resetting the Edge browser

    3. After picking the Reset Settings option, you will see the following menu, stating about the settings which will be reverted to original :
    For Mozilla Firefox, do the next actions :
    1. Open Menu tab (three strips in upper right corner) and click the “Help” button. In the appeared menu choose “troubleshooting information” :
    2. The first step to revert Mozilla Firefox

    3. In the next screen, find the “Refresh Firefox” option :
    4. The second step of Firefox restoration
      After choosing this option, you will see the next message :
      The last step for Firefox
    If you use Google Chrome
    1. Open Settings tab, find the “Advanced” button. In the extended tab choose the “Reset and clean up” button :
    2. Reset Browser

    3. In the appeared list, click on the “Restore settings to their original defaults” :
    4. Reset Browser

    5. Finally, you will see the window, where you can see all the settings which will be reset to default :
    6. Reset Browser
    Opera can be reset in the next way
    1. Open Settings menu by pressing the gear icon in the toolbar (left side of the browser window), then click “Advanced” option, and choose “Browser” button in the drop-down list. Scroll down, to the bottom of the settings menu. Find there “Restore settings to their original defaults” option :

    2. After clicking the “Restore settings…” button, you will see the window, where all settings, which will be reset, are shown :

    When the browsers are reset, you need to make sure that your web browser will be connected the right DNS while connecting to the website you want. Make a text file named “hosts” on your desktop, after that open it and fill it with the following lines4:

    # Copyright (c) 1993-2006 Microsoft Corp.
    # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
    # This file contains the mappings of IP addresses to host names. Each
    # entry should be kept on an individual line. The IP address should
    # be placed in the first column, followed by the corresponding host name.
    # The IP address and the host name should be separated by at least one
    # space.
    # Additionally, comments (such as these) may be inserted on individual
    # lines or following the machine name denoted by a ‘#’ symbol.
    # For example:
    # # source server
    # # x client host
    # localhost name resolution is handle within DNS itself.
    # localhost
    # ::1 localhost

    Find the hosts.txt file in C:/Windows/System32/drivers/etc directory. Rename this file to “hosts.old.txt” (to distinguish it from the new one), and then move the file you created on the desktop to this folder. Remove the hosts.old from this folder. Now you have your hosts file as good as new.

    Nevertheless, there is one problem that makes things a lot harder to restore, especially without the anti-malware program. As I have mentioned, “Your computer is disabled. Please call Microsoft.” which implements serious changes in your web browser configurations. For some of them, it is impossible (or much harder) to do it manually since you need to open each config file and change the modified rows to their original state. Another problem is that any mistake on that step can make the browser completely unusable. So, using GridinSoft Anti-Malware for that target is a much more reliable choice.

    Reset your browser settings with GridinSoft Anti-Malware

    To reset your browser with GridinSoft Anti-Malware, open the Tools tab, and click the “Reset browser settings” button.

    Tools tab in GridinSoft Anti-Malware

    You can see the list of the options for each browser. By default, they are set up in a manner that fits the majority of users. Press the “Reset” button (lower right corner). In a minute, your browser will be as good as new.

    Reset Browser Settings tab in GridinSoft Anti-Malware

    The browser reset is recommended to perform through the antivirus tool by GridinSoft because last can also reset the HOSTS file without any additional commands.

    User Review
    0 (0 votes)
    Comments Rating 0 (0 reviews)


    1. Gridinsoft about spyware
    2. Information about malvertising on Wikipedia
    3. GridinSoft Anti-Malware review and explanations why do I recommend this program
    4. Official Microsoft guide for hosts file reset.
    How to remove "Your computer is disabled. Please call Microsoft." scam?
    How to remove "Your computer is disabled. Please call Microsoft." scam?
    "Your computer is disabled. Please call Microsoft" is a popup that appears in your browser and states that your PC is infected. In fact, it is just a scam alert that is generated by adware in your system. Remove the virus with GridinSoft Anti-Malware.

    About the author

    Wilbur Woodham

    I was a technical writer from early in my career, and consider IT Security one of my foundational skills. I’m sharing my experience here, and I hope you find it useful.

    Leave a Reply


    This site uses Akismet to reduce spam. Learn how your comment data is processed.