How to remove “Microsoft has detected some suspicious activity on this computer”

Beware of the “Microsoft has detected some suspicious activity on this computer” scam designed to trick you into calling a fake tech-support hotline.

A screen-locker trojan is used to display a fake Microsoft alert message that says “Microsoft has detected some suspicious activity on this computer.” The fake message from Microsoft is associated with a tech-support scam designed to frighten victims into calling a dubious support hotline. Once a victim calls the hotline the scam artists will utilize various deceptive procedures to obtain currency.

After a computer becomes infected with the “Microsoft has detected some suspicious activity on this computer” trojan the computer screen will become locked and access to the machine appears restricted. When the computer is booted and the user signs into their user account a blue screen will cover the entire display. The blue screen contains a Windows logo and content that claims Microsoft detected suspicious activity.

Microsoft has detected some suspicious activity on this computer. All access to this device has been revoked due to a network security breach, Attackers might attempt to steal personal information, banking details, email, passwords and other files on the system.

Please contact a Microsoft certified technician on

+1800-935-6918

Calling the tech-support number displayed on the screen will not help you repair your computer or fix the “Microsoft has detected some suspicious activity on this computer” message. There are several methods to bypass the lock-screen. You might be able to end the associated process by using the right keyboard combination to open the Task Manager or access your Start Screen. If you press Ctrl + Shift + Esc the Task it will prompt the Task Manager. Once the Task Manager is open you might be able to end the correct process successfully if you can locate it. The process name is usually random words, letters, or numbers.

If you are able to bypass the screen immediately install Antimalware software to scan for malware and remove it immediately. Antimalware software such as Malwarebytes 3.0 Premium can block this infection in real time and automatically remove the malware from your computer. Malwarebytes Anti-Malware Free is a scan and remove only tool that can be used to manually remove malware without real-time features. It is important to remove the malware from your computer as soon as possible.

Symptoms

If you are infected with malware that displays the “Microsoft has detected some suspicious activity on this computer” lock-screen it is likely that your computer is infected with other malicious files, potentially unwanted programs, adware, and malicious threats. This variant of malware is specifically downloaded by other malware in the background without user consent or knowledge. Due to the fact that this malware bundles with other security threats this malware will exhibit a variety of symptoms.

• Restricted access to Windows Desktop
• Slow and sluggish computer
• Decreased internet speed and connectivity
• Computer crash
• Pop-up ads
• Modified homepage, default search settings, and browser shortcut
• Programs automatically open

All malicious threats associated with this malware that cause additional symptoms can easily be removed with Antimalware software such as Malwarebytes 3.0 Premium or Malwarebytes Anti-Malware Free. It is important to remove all threats from your computer to keep your information safe from hackers and avoid other serious security risks. As previously stated, it is important to remove this malware as soon as possibly you can.

How to remove Microsoft has detected some suspicious activity

There are several ways to remove “Microsoft has detected some suspicious activity on this computer” from your computer. You can perform a restore or a reset to remove programs you installed on your computer or restore your computer to an earlier date. You can also bypass the lock-screen to install Malwarebytes malware removal software or access your machine in Safe Mode with Networking in order to enter your computer in Safe Mode to bypass the lock-screen and install Malwarebytes.

Safe Mode with Networking

1. Restart your PC. Once you reach the sign-in screen, hold the Shift key down on your keyboard while you select Power > Restart.
2. After your PC restarts, select Troubleshoot > Advanced options > Startup Settings > Restart.
3. After your PC restarts again, select 5 or F5 for Safe Mode with Networking.
4. Open your browser window and download Malwarebytes 3.0 Premium or Malwarebytes Anti-Malware Free.
5. Open Malwarebytes and click the Scan Now button on the Dashboard to begin a scan.
6. Once the Malwarebytes scan is complete click the Quarantine button.

Restore

If a restore point has previously been established on your machine you will be able to perform a system restore in order to restore your machine to a date and time before it was infected. You will lose files on your computer that were obtained prior to the restore point.

There are several options to restore your computer. Most computers have their own restore software that can be found by performing a search. Additionally, computers that run the Windows Operating System have a default restore program that can also be found by performing a search.

A boot screen that can be used to access options to restore your computer can be reached by rebooting your computer and pressing the F8 key once the manufacture screen is displayed.

Reset (Recovery)

A system recovery (or reset) will recover your computer to factory settings. You will lose the current programs and files on your computer.

There are several options to recover your computer to factory settings. Most computers have their own recovery software that can be found by performing a search. Additionally, computers that run the Windows Operating System have a default recovery program that can also be found by performing a search.

A boot screen that can be used to access options to restore your computer can be reached by rebooting your computer and pressing the F8 key once the manufacture screen is displayed.