Pop-ups keep interrupting you? Check the source before clicking a fix.

In Chrome, open Settings, Privacy and security, Site settings, Pop-ups and redirects. Keep unwanted automatic pop-ups blocked and review sites already allowed. In Edge, use Settings, Privacy, search, and services, Site permissions, All permissions, Pop-ups and redirects and keep Blocked recommended enabled. In Safari on Mac, use Settings, Websites, Pop-up Windows to review individual sites and the default for other sites.

These settings do not remove every advert within a webpage. Some ads imitate a floating window, and a window opened after a user click may behave differently from an automatic pop-up. Do not turn off Safe Browsing, fraudulent-site warnings or other protection because a page says this is necessary to stop adverts. Keep the browser updated through its own About/update controls or the supported system update route.

A genuine service may use a pop-up for a statement or document. Verify the site independently and, only if required, use a narrow exception for that known site rather than allow every site. Do not allow an exception for a fake support or download warning. If the unwanted content was limited to one page, leave it; if it follows ordinary browsing or settings change back, continue with software checks.

Open the browser’s Extensions or Manage extensions screen. Record recent additions and who installed them. On an authorised personal browser, turn off a clearly unwanted nonessential extension and check ordinary known pages. If it is confirmed unnecessary or responsible for the problem, remove it through the supported browser controls. Do not turn off required password, accessibility, security or work extensions just because their names are unfamiliar.

Review recent installed apps through the system’s supported app list, checking publisher, purpose and timing before uninstalling anything. Do not delete program folders or system files, use registry cleaners, or empty all downloads as a diagnostic step. The unwanted software installation guide covers bundled apps and changes returning. Employer-managed settings need the responsible team; do not remove a policy or management profile to bypass it.

If symptoms persist, open the genuine installed protection app independently, update it and follow its supported scan/detection process. Do not install competing real-time scanners from an advert. A browser reset can change permissions, extensions and other preferences; read the exact browser’s effect and preserve needed access/bookmarks first. It is not a first step or proof malware is removed. If an extension, permission or app keeps returning, stop repeated resets and get help identifying why.

If you paid or exposed payment/banking details, contact the bank or card provider promptly using a known app, card or independently verified contact. Do not use the number in the pop-up or a follow-up message, and do not delay that contact until a scan finishes. If workplace access or information was involved, notify the responsible incident team through its known channel.

If an unsolicited person still has remote control, end the active session through the genuine remote-access app’s own session controls if you can identify them safely. Do not accept a reconnection request. If you cannot end it, contact the responsible support team from another device promptly and stop using the affected device for sensitive activity. Use a separate trusted device/channel for urgent provider contact and account recovery. Preserve available evidence and explain exactly what was shared, installed or authorised. Removing the visible remote-access app alone does not establish that all access or changes have been undone.

For software opened/run, unexpected permissions or a genuine malware detection, use the malware response guide and responsible provider. For exposed account details or codes, use the genuine account’s recovery/security process and review sessions/access as appropriate. Downloading a file and running it are different events; report which happened. A quiet browser or clean scan does not reverse disclosed passwords, stolen data, payments or every threat. The fake website and phishing guide explains independent verification.

Use the affected browser/profile for an ordinary known task through an independently known address or bookmark. Confirm the intended notification permission or pop-up setting remains as selected, required legitimate features still work and unwanted tabs/redirects do not follow that normal use. Do not reopen the suspect page or click an advert to see whether a blocker catches it.

If a legitimate feature stopped working, review the specific setting or extension changed, preserving protection and using only a verified necessary site exception. Do not undo every safeguard or return an identified unwanted extension simply to make a page load. Record a continuing failure, including the browser/profile, time and source if safely visible.

When the identified interruption is resolved and normal use works, stop unnecessary changes. Keep supported updates and review future permission/download requests carefully. Monitor for recurrence; no short quiet period proves a computer or account is safe. If there was prior sharing, installation, payment or remote access, complete its separate response even if the browser now behaves normally.

Get help if alerts or changes return, you cannot identify the source, required work settings are managed, genuine protection reports a detection, or you allowed access or shared information. Use the responsible workplace team for managed systems and the genuine bank/account provider for their recovery actions.

Our virus and malware support can help assess the device-side symptom and an appropriate next step. Provide the browser/system, approximate time, what was clicked/downloaded/run and any relevant safe evidence privately. Never send passwords, one-time codes or unrestricted remote-access details to an unsolicited contact.

Agree what will be checked, preservation and privacy requirements, changes needing consent and how normal use will be verified. Browser repair is not a guarantee that stolen data is recovered, payments reversed, every threat removed or an account restored. Keep those provider and incident actions visible until resolved.