What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If a security app is bombarding you with alarming pop-ups, remove it from Start > Settings > Apps, then update Microsoft Defender, run a full scan, and use Microsoft Defender Offline if the software remains. Finally, verify that trusted real-time protection and Windows Firewall are active.
These instructions are for Windows. They do not apply to macOS, Android, or iOS. Do not pay, renew, or install anything through a suspicious warning window; use Windows Settings and Windows Security directly.
As an Amazon Associate I earn from qualifying purchases.
First, stop interacting with the warning
A fake-looking antivirus can use urgent messages about viruses, expired subscriptions, or stolen data to push you toward a payment page or another download. Whether the program is confirmed malware or simply unwanted software, handle it safely:
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors- Do not enter payment details into the pop-up.
- Do not select “renew,” “clean,” “fix,” or similar controls inside the suspicious app.
- Do not install a second program because the warning tells you to.
- Open Windows Settings and Windows Security yourself instead of following links in the alert.
If the window is difficult to close, leave it alone and continue with the Windows removal steps below. The objective is to remove the installed app and then check the computer with a trusted security tool. Do not assume that an alarming design alone proves whether the software is malware; let Windows Security and the app’s installation record guide the next step.
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Is it a potentially unwanted app or malware?
Microsoft separates potentially unwanted applications (PUAs) from confirmed malware. Malware is malicious software that can steal information or commit other cybercrimes. A PUA occupies a gray area: it may show unexpected advertisements, slow the computer, use the PC for cryptomining, or offer other unwanted applications. A PUA detection is not automatically proof of malware, but removing software you did not want is reasonable.
Clues that the app is unwanted
- You do not remember installing it, or it arrived with another download.
- It displays repeated warnings or advertisements that are unrelated to normal Windows notifications.
- It asks for payment before it will perform a supposed emergency repair.
- It changes browser or system behavior and continues after you close its window.
- Windows Security identifies it as a potentially unwanted application.
These signs do not establish the app’s legal status or prove that every warning is fraudulent. They do tell you to avoid the app’s own controls and use Windows’ built-in management and scanning tools. Treat a PUA as unwanted even when a scan does not label it confirmed malware; the practical goal is to remove software you did not choose and verify that protection is working.
Prepare before uninstalling
- Save open work and close the suspicious app if it allows you to do so.
- Write down the app’s exact name as it appears in Windows Settings. This helps you select the correct entry if several security tools are installed.
- Do not create a Windows Security exclusion merely to stop notifications. Allowing a file lets it run and should be reserved for software and a publisher you trust.
- Plan to restart if Windows requests it. Some security components do not finish unloading until the next restart.
If more than one security product is listed, identify which one is unwanted before removing anything. Removing the wrong product can leave the computer without its intended protection. When in doubt, check the exact product name in Windows Security and use the publisher’s official documentation rather than a link in an alert.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchUninstall the security app through Windows Settings
- Open Start > Settings > Apps.
- Open Installed apps on current Windows versions. On older releases, the page may be called Apps & features or Add or Remove Programs.
- Find the unwanted antivirus or security app, open its menu, and select Uninstall.
- Follow the program’s removal wizard. Read each prompt carefully and decline offers to install another product.
- Restart Windows when the wizard or Windows asks you to.
Removing an entry from the Apps list does not guarantee that every security component has disappeared. Microsoft notes that some security software may not uninstall completely. If the normal uninstall fails, stops with an error, or leaves the pop-ups in place, do not keep repeating the same wizard; continue with the scanning and escalation steps below and consult the publisher’s support instructions when appropriate.
An uninstall failure is not a reason to download a random third-party cleaner. Use the publisher’s support page for the exact product and version, because security programs may install components that the ordinary Windows uninstaller cannot remove. Keep the error message or product name available when contacting support.
Scan the computer after uninstalling
Uninstalling the visible program addresses the app itself, but a scan checks for unwanted files or malware that may remain. Use Microsoft Defender’s own definitions and scans rather than a tool promoted by the suspicious app.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Update Defender security intelligence
Open Windows Security, go to Virus & threat protection, and check for the latest security-intelligence updates before scanning. Updated intelligence gives Defender the information it uses to identify current threats. If the update does not complete, note the status shown in Windows Security and continue with Microsoft’s troubleshooting guidance rather than trusting a pop-up that claims an update is required.
Run a full scan first
- In Windows Security, open Virus & threat protection.
- Choose Scan options.
- Select Full scan and start the scan.
- Let the scan finish, then read the result and apply the action Windows Security offers for each detection.
A full scan is the standard first check after uninstalling an unwanted security program. The scan can take a substantial amount of time because it examines the computer’s files; do not interpret the duration as a failure. Keep the computer powered on and avoid cancelling it simply because the progress appears slow.
When the scan reports an item, read its name and status. A detection that is blocked may still require you to select an action and start remediation. Do not choose an exclusion or allow option merely to clear the notification.
Use Microsoft Defender Offline if the problem persists
If the unwanted software remains active, returns after a restart, or a normal scan cannot clean it, run Microsoft Defender Offline from the same Windows Security area. Offline scanning restarts the PC and checks before the normal Windows environment loads, which is Microsoft’s escalation step for persistent unwanted software.
Save your work before starting. Follow the on-screen restart prompt and allow the offline scan to complete. When Windows starts again, return to Windows Security to review the result. Offline scanning is a next step when the problem persists; Microsoft’s guidance does not promise a particular detection rate, speed, or guaranteed outcome compared with a full scan.
Recommended Free Tools
Apply detections instead of merely blocking them
Windows Security can detect a PUA and show that it has been blocked, but a block is not necessarily removal. Select the action Windows Security offers and start the remediation. A detection can remain listed until you choose and apply an action. If Windows offers quarantine, removal, or another remediation choice, read the description and confirm the action rather than dismissing the event.
Rank #3
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download] | Includes Scam Protection, Advanced VPN, Dark Web Monitoring, & PC Cloud Backup](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Check Protection History promptly
- Open Windows Security.
- Select Virus & threat protection.
- Open Protection history.
- Review the entries for the unwanted app, the action taken, and any follow-up instruction.
Protection History records Defender actions, including removed PUAs, but its events disappear after two weeks. Review the page soon after the scan so you do not lose the evidence needed to troubleshoot the removal. Look for the detection name, whether Defender blocked, quarantined, or removed it, and whether Windows asks you to take another action.
If an entry says “Remediation incomplete,” Defender could not finish cleaning. Treat that status as an unresolved problem: follow the event’s instructions, run Defender Offline if you have not already done so, and use the escalation path below. Do not regard a disappeared event as proof that the program was removed; Protection History has a two-week retention period, so an old event may simply no longer be displayed.
Compare the two Defender cleanup paths
| Cleanup path | When to use it | Role in the sequence | What to do afterward |
|---|---|---|---|
| Full Microsoft Defender scan | After uninstalling the app, as the standard first check | Searches Windows for remaining unwanted software or malware | Apply the offered action and review Protection History |
| Microsoft Defender Offline | When unwanted software persists or a normal scan does not resolve it | Checks the PC after a restart, before the usual Windows environment loads | Let the scan finish, start Windows, and review Protection History |
Microsoft’s guidance does not establish a comparative detection rate, speed, or guaranteed success for these paths. Use Offline scanning because the software persists, not because it is promised to find more threats in every case. Running both in this order gives you a normal Windows check first and an escalation path if the unwanted program remains active.
Make sure protection is still active
Removing an antivirus can create a protection gap. Microsoft warns that a PC can be unprotected if its current internet-security product is removed without another antimalware product taking over.
Check the active provider
- Open Windows Security.
- Open Virus & threat protection and inspect the provider and real-time-protection status.
- Confirm that Microsoft Defender or another trusted security product is active, with real-time protection enabled.
- Open Firewall & network protection and confirm that Windows Firewall is on for the networks Windows lists.
If you intentionally use another trusted antivirus, verify that it reports active protection before relying on it. Do not install multiple products that provide simultaneous real-time antivirus protection simply for extra reassurance. Microsoft cautions that multiple real-time products can reduce performance or cause instability. The objective is one trusted, active real-time provider, not the largest possible number of security products.
When the app will not uninstall
Use the publisher’s removal guidance
Some security products install components that the ordinary Windows uninstaller cannot remove. Microsoft’s consumer guidance points users to the software publisher’s support when a security product does not uninstall completely. Use the publisher’s official support channel for that exact product and version; do not download an unverified “cleaner” advertised by a pop-up.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Use Microsoft’s program-removal troubleshooting
If Windows reports that a program cannot be removed, follow Microsoft’s troubleshooting guidance for programs that are blocked from being installed or removed. Continue to scan the suspicious software with Windows Security, and use Defender Offline when the unwanted program persists. Keep notes about the uninstall error, the scan result, and any “Remediation incomplete” entry so the publisher or Microsoft support can understand what has already been tried.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Consider Reset this PC only as a last resort
If normal removal, scanning, and the publisher’s guidance do not resolve the issue, Microsoft lists Reset this PC (keep my files) as an escalation option. A reset is not the first step for an ordinary unwanted-app warning.
Read Microsoft’s reset instructions before proceeding. “Keep my files” does not mean that every application, driver, setting, or security component will remain installed. A reset changes the Windows installation, so make sure you understand what will be removed and what you will need to reinstall before confirming it. Treat the reset as a recovery decision after ordinary uninstall and security checks have failed, not as a substitute for identifying the app or reviewing Protection History.
Windows version and support considerations
Microsoft’s current troubleshooting guidance states that Windows 10 support ended on 2025-10-14 and recommends moving to Windows 11. This does not change the uninstall sequence, but it matters when deciding how to maintain a cleaned computer: check Microsoft’s current lifecycle and upgrade guidance for the edition you run before treating an unsupported installation as a long-term security solution.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Common mistakes to avoid
- Paying to silence the alert: payment does not remove the installed program and can expose financial information.
- Using the suspicious app’s “allow” button: allowing a detected file lets it run. Do this only when you trust both the software and its publisher.
- Stopping after the uninstall: scan afterward because unwanted files or malware may remain.
- Assuming “blocked” means “removed”: select and start the remediation action, then inspect Protection History.
- Ignoring “Remediation incomplete”: that status means further work is required.
- Leaving the PC without active protection: verify Defender or another trusted provider and Windows Firewall after removal.
- Running several real-time antivirus products together: multiple products can reduce performance or cause instability.
- Resetting immediately: reserve Reset this PC for cases that remain unresolved after ordinary removal and scanning.
- Trusting a download offered by the alert: use Windows Settings, Windows Security, Microsoft guidance, or the product publisher’s official support instead.
- Waiting too long to inspect history: Protection History events disappear after two weeks.
A practical decision sequence
- Pop-up appears: do not use its payment or renewal controls. Open Windows Settings directly.
- App is listed: uninstall it from Settings > Apps, follow the wizard, and restart if requested.
- App is gone but concern remains: update Defender security intelligence and run a full scan.
- Defender finds a PUA: select the offered action, start remediation, and check Protection History.
- Software persists or cleanup is incomplete: run Microsoft Defender Offline and review the result after Windows restarts.
- Protection was removed: confirm a trusted real-time provider and Windows Firewall are active.
- Removal still fails: use the publisher’s official support, Microsoft’s program-removal troubleshooting, and only then consider Reset this PC (keep my files).
This sequence separates removal of the visible app from verification of the system. That distinction prevents a clean-looking uninstall from being mistaken for a completed security check.
Frequently Asked Questions
How do I remove a fake antivirus that keeps showing pop-ups?
Do not use the pop-up’s payment, renewal, or cleanup controls. Open Start > Settings > Apps, uninstall the listed app, restart if requested, then update Microsoft Defender and run a full scan. If the software persists, run Microsoft Defender Offline and review Protection History.
Best Value
![Malwarebytes Standard, Premium Security| Amazon Exclusive | 18 Months, 2 Devices | Windows, Mac OS, Android, Apple iOS, Chrome [Online Code]](https://m.media-amazon.com/images/I/41LbYnawq9L._SL160_.jpg)
- AWARD WINNING Antivirus, anti-malware, anti-spyware & more
- 24/7 REAL TIME PROTECTION against emerging malware threats, including ransomware and viruses- without slowing you down.
- PROTECTS YOUR DEVICES ON MULTIPLE PLATFORMS: Get cyber protection for your computers, smartphones, or tablets- Compatible with Windows, Mac, Android, iOS
- DOWNLOAD AND INSTALL INSTANTLY
- UNMATCHED THREAT DETECTION: We found malware on 40 percent of devices that already had a third-party antivirus installed.
Is a potentially unwanted app the same as malware?
No. Microsoft describes malware as malicious software that can steal information or commit cybercrime. A potentially unwanted application is a gray-area program that may show unexpected ads, slow the PC, use it for cryptomining, or offer other apps. It is reasonable to remove a PUA you do not want, but the label alone is not proof of confirmed malware.
What should I do if the antivirus will not uninstall?
Use the publisher’s official support instructions for that exact product, continue scanning with Windows Security, and run Defender Offline if the software persists. Microsoft also provides troubleshooting for programs blocked from being installed or removed. Do not download an unverified cleaner from an alert.
Does a Defender ‘blocked’ message mean the app is gone?
Not necessarily. Select and start the action Windows Security offers. Then open Virus & threat protection > Protection history to see whether the item was removed, quarantined, or needs more work.
Free tools Windows power users keep installed
One-click scans. No signup required.
What does ‘Remediation incomplete’ mean?
It means Defender could not finish cleaning the detection. Follow the event’s instructions, run Microsoft Defender Offline if you have not already, and use Microsoft or the publisher’s troubleshooting guidance.
How long does Protection History keep entries?
Microsoft says Protection History events disappear after two weeks. Review the page promptly after scanning so you can see the detection and any follow-up instruction.
Should I install two antivirus programs for extra protection?
No. Microsoft cautions that multiple products with simultaneous real-time protection can reduce performance or cause instability. Confirm that Microsoft Defender or one other trusted provider is active, along with Windows Firewall.
Will Reset this PC keep everything installed?
No. ‘Keep my files’ does not guarantee that every application, driver, setting, or security component remains. Use Reset this PC only after ordinary removal and scanning fail, and read Microsoft’s reset instructions before proceeding.
The Bottom Line
On Windows, avoid the suspicious alert, uninstall the app through Settings > Apps, update Defender, run a full scan, and use Defender Offline if it persists. Apply—not merely block—detections, review Protection History within two weeks, and confirm one trusted real-time provider plus Windows Firewall is active. Use publisher support, Microsoft troubleshooting, and finally Reset this PC only when normal removal fails.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
