Maybe you logged in and had virus warnings on the screen within seconds. Red banners, urgent language, a phone number. Maybe your browser was suddenly not the one you had set. You changed it back. It changed itself again.

All week I have written about computers that could not finish starting. No power. No picture. Stuck in a repair loop. Today is the other kind, and in some ways it is worse, because everything looks like it is working. The machine starts. It just starts wrong, because something got itself onto the list of things that run when you log in.

Where does that come from?

Not from anything reckless.

It comes from a free download that carried a passenger. From a "driver updater" or a "PC cleaner" installed three years ago that never left and never will on its own. From a browser extension that asked for one permission and helped itself to the rest. From an installer with a pre-ticked checkbox halfway down a page nobody has ever read, which is also why a brand new computer arrives full of junk.

None of that is carelessness. It is the ordinary cost of using a computer that people are allowed to install things on.

Now, the tell.

Real security software does not demand money on a countdown. It does not need you to phone anybody. It does not describe your computer as at risk in a banner you cannot close, and it does not put a number on how many threats it found before you have paid it.

Those are sales mechanics wearing the costume of an alarm. The urgency is the product. The fear is the product. There is an entire industry that makes its money selling people the cure for a disease it invented, and it has been running the same play since before I opened this shop.

The problem: A fake warning and a genuine infection look identical to a normal person. That is not a failure on your side. It is the design. The people writing these things are marketing professionals and the whole business depends on you not being able to tell the difference in the ten seconds you have before you panic.

One of them costs you nothing but nerve. The other is a real cleanup. Telling them apart is a job, not an instinct.

So what do you actually do.

Do not call the number. Whatever it says, whatever it looks like, whatever logo is on it.

Do not pay to make it stop. Paying does not remove anything. It confirms that the number works, and it puts you on a list.

Write down exactly what it says before you close it. The wording matters to a technician.

Close what you can and stop using it for anything that involves a password until it has been looked at.

If you have already got one of these on screen right now and it will not close, there is a post for exactly that. And if the culprit turns out to be a cleaner or an optimizer you installed years ago in good faith, here is what those actually do.

If a browser keeps resetting itself no matter how many times you change it back, that is not stubbornness and it is not your imagination. Something is holding it, usually a policy or an extension, and it comes off.

The fix is normally about an hour. That is almost always less than the popup was asking for, and unlike the popup it actually ends.

Bring it in, or book a remote session. Many of these do not need a drop-off.

Mike
PCRescue | Portland, ME
Thirty-five years fixing computers, twenty-four of them running this shop.