“Your computer is disconnected. Please call Microsoft” is another scammer’s creation, a pop-up notification pretending to be a Microsoft support message. Although there is no question of blocking your computer, there is some truth in it. Such banners indicate malware in your system, potentially unwanted programs (PUPs). In this post, you will learn why following the instructions on this banner is a bad idea.
“Your computer is disabled. Please call Microsoft.” description
As I mentioned, this notification appears as a popup banner covering the browser’s content. There is no correlation between the websites you browse and the appearance of that banner. However, it states that your PC is blocked. Furthermore, the popup says that you got the malware after visiting pornographic websites:
Do not restart or use your computer.
Your computer is disabled. Please call Microsoft.
Access is the block security reason for this computer.
Please contact us immediately. A technician will help you solve the problem.
You can easily skip this message, which will not affect your computer. The only possible consequence if you close the window or restart your PC is a scarecrow. The virus shows you this message to make you call the specified number. Although it is presented as a Microsoft support contact number, it is not. You can quickly check Microsoft support methods on its official website. These scammers act similarly to another group of cybercriminals who use the FastSupport name.
The exact appearance of that popup alert
In some cases, an “alert from Microsoft” in the shape of a pop-up message may completely block your web browser. Using it in any possible method is impossible – the notification covers the whole window. Sometimes, that banner may cover the upper panel – The close cross and minimize buttons will not be pressable. In such cases, the only way to close the web browser is to kill the process in Task Manager.
A virus that causes pop-up ads is classified as adware. This type of malware profits its creators by displaying various ads to users who have installed it on their computers. Unfortunately, its symptoms are well known to all active PC users – ads are present on every page, even where they should not be, and ad blockers do not save the situation; the browser window opens automatically and will show you a flooded page with ads. So it’s hard to predict what will happen if you click on one of these banners. But, from all appearances, nothing good.
Why do they do it?
The developers of “Your computer is disabled. Please call Microsoft.” want money. To do this, they show you this annoying banner hoping that you will call the number given. During the call, the “tech support” will offer you to install several protections, depending on which ones were pre-paid to them. Of course, these anti-virus programs are more of a scareware than full-fledged protection against malware. They will show you numerous warnings about problems on your computer. The distinguishing feature of all such programs is that you must buy the full application version to fix all the issues found.
Usually, all of these “problems” are 100% fictional. Fake antivirus software can pick a random file and block it, saying it is vulnerable or malicious. Thus, it can easily block the file of a program you use every day, and it won’t start or will run with errors. Unfortunately, there is another side to the problem: many users trust these programs, buy them and use them in their daily activities. Consequently, its developers get an incentive and continue to develop their “antivirus”. Users who realize it is a malicious application face another problem: scareware programs are difficult to remove without a proper anti-malware tool. You won’t be able to find such antiviruses in the list of installed programs, and there is no uninstall.exe file in their root directory.
Besides installing potentially unwanted programs, scammers may perform various social engineering tricks. These can be targeted on your credentials, personal data, or even online banking information. Moreover, they generate profit for PUPs installation and ads it shows massively to its victims.
Is “Your computer is disabled. Please call Microsoft.” dangerous?
The virus can only be distracting and annoying because of mentioned popup banners and random ads that appear from nowhere. As I have described, the main danger is that you can be caught on this lure and install fake security tools. The activity of the last ones is not destructive but can harm your daily activities: it is hard to design something if your Photoshop and Lightroom are blocked.
sAntivirus blocked OracleVM and one of Microsoft files.
Some of the fake antiviruses, however, are not so “peaceful”. Different malware analysts say that such apps as SAntivirus, SAproduct or Segurazo Antivirus have several signs of being a well-disguised spyware1. It steals the information about the user’s PC configuration, data about the system settings and the most used applications. There is no need for the antivirus program to use this information, hence, it can only be used for malevolent purposes.
How did this virus reach my PC?
In the majority of cases, you get the “Your computer is disabled. Please call Microsoft.” malware through the malicious advertisements on the web2, or through the free/hacked programs you get on the Internet. You can avoid the first way of spreading easily – get rid of the habit of clicking the ads on websites. Yes, you can find something useful on them, but something like winning a prize in a lottery you haven’t taken part in or purchasing a new PC with a 90% discount is likely a scam.
Example of malicious advertisements
Software bundling is a widespread practice among the virus developers. Users who hack the programs to make them usable without purchasing a license approve any offer to include another program in the pack because they are gaining money in such away. Check precisely the installation window for signs like “Advanced installation settings” or so. The ability to switch off the malware installation often hides under such items.
How to get rid of “Your computer is disabled. Please call Microsoft.” malware?
The removal process of that virus includes the browser reset. It is better to use anti-malware software to remove the adware and reset the browser. Manure removal is also possible. However, this virus has several locations where it keeps its files. It also makes big changes to browser configurations, which are very hard to revert. My choice for “Your computer is disabled. Please call Microsoft.” removal is GridinSoft Anti-Malware.3.
Removing the viruses with GridinSoft Anti-Malware
I hope this guide helped you get rid of this annoying banner. Share this article with your friends or colleagues who also got that virus. Good luck!
When the virus is removed, it is time to deal with the consequences of its presence in your browser. Here are the guides for reverting to default for all popular web browsers.
Reset browser settings to default
Manual method of browser reset
To reset Edge, do the following steps :
- Open “Settings and more” tab in upper right corner, then find here “Settings” button. In the appeared menu, choose “Reset settings” option :
- After picking the Reset Settings option, you will see the following menu, stating about the settings which will be reverted to original :
For Mozilla Firefox, do the next actions :
- Open Menu tab (three strips in upper right corner) and click the “Help” button. In the appeared menu choose “troubleshooting information” :
- In the next screen, find the “Refresh Firefox” option :
After choosing this option, you will see the next message :
If you use Google Chrome
- Open Settings tab, find the “Advanced” button. In the extended tab choose the “Reset and clean up” button :
- In the appeared list, click on the “Restore settings to their original defaults” :
- Finally, you will see the window, where you can see all the settings which will be reset to default :
Opera can be reset in the next way
- Open Settings menu by pressing the gear icon in the toolbar (left side of the browser window), then click “Advanced” option, and choose “Browser” button in the drop-down list. Scroll down, to the bottom of the settings menu. Find there “Restore settings to their original defaults” option :
- After clicking the “Restore settings…” button, you will see the window, where all settings, which will be reset, are shown :
When the browsers are reset, you need to make sure that your web browser will be connected the right DNS while connecting to the website you want. Make a text file named “hosts” on your desktop, after that open it and fill it with the following lines4:
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column, followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a ‘#’ symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
Find the hosts.txt file in C:/Windows/System32/drivers/etc directory. Rename this file to “hosts.old.txt” (to distinguish it from the new one), and then move the file you created on the desktop to this folder. Remove the hosts.old from this folder. Now you have your hosts file as good as new.
Nevertheless, there is one problem that makes things a lot harder to restore, especially without the anti-malware program. As I have mentioned, “Your computer is disabled. Please call Microsoft.” which implements serious changes in your web browser configurations. For some of them, it is impossible (or much harder) to do it manually since you need to open each config file and change the modified rows to their original state. Another problem is that any mistake on that step can make the browser completely unusable. So, using GridinSoft Anti-Malware for that target is a much more reliable choice.
Reset your browser settings with GridinSoft Anti-Malware
To reset your browser with GridinSoft Anti-Malware, open the Tools tab, and click the “Reset browser settings” button.
You can see the list of the options for each browser. By default, they are set up in a manner that fits the majority of users. Press the “Reset” button (lower right corner). In a minute, your browser will be as good as new.
The browser reset is recommended to perform through the antivirus tool by GridinSoft because last can also reset the HOSTS file without any additional commands.
User Review
( votes)References
- Gridinsoft about spyware
- Information about malvertising on Wikipedia
- GridinSoft Anti-Malware review and explanations why do I recommend this program
- Official Microsoft guide for hosts file reset.
