Dealing with a Persistent Microsoft Defender Subscription Scam Popup

In the digital landscape we navigate daily, cybersecurity threats are becoming increasingly sophisticated. Recently, I encountered a troubling issue: a persistent Windows Defender subscription scam popup that seems impossible to eliminate. If you find yourself in a similar situation, here’s what I experienced and how I attempted to resolve it.

The Issue at Hand

Lately, my computer has been plagued by a scam popup that falsely claims, “Your Windows Defender antivirus is upgraded to a Pro plan of $299.00,” threatening to charge my credit card on an upcoming date. Despite knowing this is a scam, the constant reminders have left me concerned about the potential security of my computer. The popup also triggers PowerShell whenever it appears, which raises additional alarms.

Steps I’ve Taken to Address the Problem

To combat this invasive popup, I have already taken several steps:

1. Browser Cleanup: Initially, I uninstalled all of my browsers, hoping to eradicate the source of the popup. Despite these efforts, the intrusion persisted.

2. Comprehensive Scanning: Utilizing Microsoft Defender, I conducted quick scans, full scans, and even offline scans. Unfortunately, the issues remain unresolved.

A New Discovery: Conhost.exe

While investigating further, I noticed an application called conhost.exe located in my System32 folder. Although preliminary research suggests it isn’t inherently malicious, the fact that it activates alongside PowerShell and the popup raises significant concerns.

Seeking Solutions

Given my current situation, I am reaching out to this community in hopes of gathering insights or suggestions:

• How can I verify whether my computer has indeed been compromised?
• Are there specific tools or methods you would recommend to remove such persistent threats?

While I may be aware that these popups are scams, my primary objective is to ensure that my system remains secure and devoid of any malicious software. Any assistance or advice would be greatly appreciated as I navigate this frustrating ordeal.