Firewall Spyware Alert Scam

Written by Valdis Koks

“Firewall Spyware Alert” tech support scam that shows an alert that claims to be a Window notification. This message indicates that your important files will be deleted and indicates that your PC has problem.

Skip the details and find out how to remove “Firewall Spyware Alert” fake Tech Support Scam!

When the “Firewall Spyware Alert” Scam is shown in your browser it will contain the specific text similar to the following.

Main pop-up:

Firewall Alert – Error Code: #0x268d3(x7)
Access to this PC has been blocked for security reasons.
Contact Windows Support: +1-585-205-7786
Threat_Detected – Trojan Spyware
App: Ads.financetrack(1).exe
[Quick Support] [Go Back Safety]


Background pop-ups:


Microsoft-Windows-Defender-Alert : Call +1-585-205-7786 (USA-Toll-Free)
You Are Protected
Protection Updates: Current
Last Scan: Not available | Quick Scan
Licenses Used: 1 of 5 | Install on Another Device
Security Identity Performance Firewall
Disabled At Risk Optimized Turned Off

STATUS : Your PC is at Risk!


Quick Scan
Scanning commonly infected areas and startup files…
C:Program FilesWindows_DefenderMSASCuiL.exe

Results Summary
[+] Total items scanned:
[+] Total security risks detected:
[+] Total security risks resolved:
Total security risks requiring attention:
Microsoft [Pause][Stop]


Windows_Defender – Security Warning
Your computer has alerted us that it has been infected with a Trojan Spyware. The following data has been compromised.
> Email Credentials
> Banking Passwords
> Facebook Login
> Pictures & Documents
Windows_Defender Scan has found potentially unwanted Adware on this device that can steal your passwords, online identity, financial information, personal files, pictures or documents.
You must contact us immediately so that our engineers can walk you through the removal process over the phone.
Call Microsoft Support immediately to report this threat, prevent identity theft and unlock access to this device.
Closing this window will put your personal information at risk and lead to a suspension of your Windows Registration.
Call Microsoft Support: +1-585-205-7786 (USA-Toll-Free)
[Cancel] [OK]

Regretfully, browser-based technology assistance alerts make it hard to close down the display or in many cases even the internet browser itself. The bright side, almost all browser-based technology assistance frauds can be shut down by mosting likely to the Windows Task Manager and shutting down the web browser process. It is essential to recognize, however, that if you terminate the web browser procedure that you do not recover formerly shut websites if triggered by the browser when you introduce it once again.

Furthremore, as long as standard site advertisements might reveal internet browser technology assistance rip-offs, they are also commonly used by a number of adware-type applications. Therefore, if you are permanently encountering web browser based technology assistance scams, you need to take on check research study of your computer for adware. Another reason to see this thing is browsing through untrustworthy sites. They may contain redirects to that scam and show it to you after your click on any site element.

“Firewall Spyware Alert” – Why am I Encountering?

The Firewall Spyware Alert Scam is presented via ads that forward you to websites that reveal this fraud. Such ads can be shown by mounted adware applications or by means of less than dependable web pages that are revealing them to produce advertising revenue.

In most of the cases, if you experience a browser-based fake technology assistance fraud, after that you can just shut down the internet browser and also launch it once more. On the other hand, if you are completely encountering rip-offs similar to the “Firewall Spyware Alert” sharp, after that you need to check your device for adware and also do away with anything that lies within your system.

Self Help Instructions

This tutorial contains detailed facts, but has been elaborated in such a manner so that anyone can refer to it. Please make sure your information is backed up before you proceed.

To get rid of “Firewall Spyware Alert” Tech Support Scam, please undertake these steps:

This removal tutorial may look as well complicated as a result of the variety of the landmarks and also many applications that will certainly be used. It was just elaborated this way to make easy-to-understand, extensive, and also very easy to realize standards that anyone can put on get clear this danger at no cost. Before utilizing this tutorial, we provide you review it when as well as download and install all various other important applications to your desktop. Once you so, please print this write-up as you might require to shut down your internet browser home window or reactivate your device.

To close a browser-based Tech Support Scam alert, initial check if you can shut the tab it is being shown on or the web browser itself. If you are unable of doing so, then you require to adhere to the steps listed below relying on your operating system.

Windows 8 & Windows 10Windows 7 & Windows Vista

To shut down Firewall Spyware Alert Tech Support Scam, you should stop the process for the browser that is now showing the browser-based tech support scam. To do this we will refer to the help of the Windows Task Manager. To start the task manager, hit the CtrlAlt, and Delete buttons simultaneously to reveal the Windows security screen displayed below.

Windows 10 - Task Manager

As soon as the above message is open, click on the Task Manager link as shown by the red arrow in the picture shown above.

The Windows Task Manager will now open and show all the active programs on the device as displayed below.

Tech Support Scam - the active programs end task

Browse via the list of running programs and left-click once on the task related to your web browser. The names for an active browser could specify Microsoft Edge,Internet ExplorerChrome, Opera and Firefox.

As soon as you have chosen a browser task, click on the End Task button to shut down the program and the browser tech support scam.

You need to shut all browser jobs as quickly as the window displaying the tech assistance rip-off is closed down.

The following time you start your internet browser, do not permit the web browser to present the last opened website. You can now go to the next steps.

To shut down Your Windows 7, Windows Vista is damaged and irrelevant Tech Support Scam, you should stop the process for the browser that is now showing the browser-based tech support scam. To do this we will apply the Windows Task Manager. To launch the task manager, hit the CtrlAlt, and Delete buttons simultaneously to obtain the Windows security message displayed below.

Windows 7 - Task Manager

At the above screen, click on the Task Manager option to launch the Windows Task Manager.

When Task Manager is launched you will be in the Applications area as displayed below.

Windows Task Manager - Applications

Right now, you need to select the Processes tab.

You will now end up at a screen that displays the active processes on your device. Click on the button revealed Show processes from all users as displayed in the picture below.

Windows Task Manager - End Process

Afterwards, check the list until you encounter your web browser’s process and left-click on it as soon as it gets highlighted. As soon as you choose the browser’s process, click on the End Process button as displayed by the red arrow in the image above. If you are uncertain of the process name to terminate, please have a look at the table below:

When you are using this browser: Terminate this process:
Internet Explorer iexplore.exe
Chrome chrome.exe
Safari Safari.exe
SeaMonkey seamonkey.exe
Opera opera.exe
Firefox firefox.exe

As soon as you click on the End Process button, Task Manager will ask you to prove if you are sure you would like to shut it down as displayed in the image below.

Windows Task Manager - End Process yes

Right now, you need to click on the Yes button for the purpose of killing the process.

Your browser window must now be shut down. The next time you start your browser, do not permit the browser to open the last opened website. You may now go to the next steps.


In order to stop any applications that may complicate the removal procedure we should first download the Rkill application. Rkill will inspect your device for available virus threats and try to stop them so that they would not prevent the removal procedure. For this purpose, you need to download RKill to your device via the following link.

Once you visit the download page, click on the Download Now button named iExplore.exe. If you are prompted what location to save it, make sure to save it on your desktop.


As soon as it is downloaded, double-click on the iExplore.exe icon. This way, you will automatically try to terminate any processes related to Firewall Spyware Alert Tech Support Scam and other threats. Please take your time while the application searches for various malware apps and terminates them. As soon as this has been done, the black window will automatically shut down and a log file will come up. You need to review the log file and then shut down so you can proceed with the next step.

If you have issues using RKill, you can download the other renamed versions of RKill via the rkill download page. All of the files stand for renamed copies of RKill, which you can use instead. Please bear in mind that the download page will come up in a new browser window or tab.

Do not restart your device after running RKill as the malware applications will be launched again.


Right now, you should download Loaris Trojan Remover, for the purpose of scanning your device for any any viruses, adware, or potentially unwanted applications that may be in place. Go ahead and download Loaris Trojan Remover via the following location and save it to your desktop:

As soon as it is downloaded, shut down all applications and open windows on your device.
At this point, double-click on the icon on your desktop named loaris-mypc.exe. This will begin the installation process of Loaris Trojan Remover into your system.
As soon as the installation starts, proceed with the installation guidelines in order to keep up with the installation procedure. Do not make any amendments to the default parameters and when the application has completed installing, Loaris will automatically launch itself and shown the main screen.

You will at this point be at the main screen for Loaris Trojan Remover as displayed below.

Loaris Trojan Remover - Scan Tab
Choose the Full Scan button to start the malware elimination scan.


Loaris will now begin scanning your device for viruses, adware, and potentially unwanted applications. This procedure can take quite a continuous time, so we offer you do something else and from time to time check on the stage of the scan to check when it is over.

Loaris Trojan Remover - scanning in process


As soon as Loaris has completed scanning it will show a screen that notifies of any applications that have been removed. Please keep in mind that the applications detected may be different than what is displayed in the image below.

Loaris Trojan Remover - show viruses
Inspect the scan results and when you are ready to proceed with the cleanup procedure, click on the Apply button to remove or repair all of the the chosen results.

As soon as the procedure is completed, you will encounter a screen that reports Completed. At this moment, you may shut down the Loaris Trojan Remover screen and proceed with the remainder of the guidelines.
If you are still experiencing issues with Firewall Spyware Alert Tech Support Scam then you need also to reset your browsers back to their default settings. Please keep in mind that this solution will delete all available add-ons, extensions, toolbars and other available customizations but will leave your bookmarks and favorites unchangeable.

We recommend that you reset your browser settings with the help of Trojan Killer Portable. For this puprose, perform the following steps.


Download Trojan Killer Portable by clicking on the button below:


Install and start the program. Click on the icon in the form of the globe to open the built-in utility to reset your available browsers:

Icon to open the utility to reset browser settings with Trojan Killer

Icon to open the utility to reset browser settings with Trojan Killer


Select the browsers you would like to reset and the available reset options. Finally, click on the “Reset” button:

Trojan Killer Portable - "Reset" button

“Reset” button


Once the process is completed, you will encounter the following message:

Trojan Killer Portable - Reset complete

Reset complete

Your system should now be fixed and the ‘Firewall Spyware Alert Tech Support Scam’ issue should be resolved. In case your present anti-malware tool permitted this utility on your device, consider buying the full version of Loaris Trojan Remover to get the defence against these kinds of infections in the future.

If you are still experiencing issues with your computer after meeting these standards, please do not be reluctant to connect with us through comments.

About the author

Valdis Koks

Security engineer, reverse engineering and memory forensics

Leave a Comment