A web page asks you to paste a command? Close it

A new trick is spreading fast. You visit a web page, often from a search result or an email link, and it shows a familiar check such as “I'm not a robot” or an error message. Then it asks you to “verify” by pressing a few keys. Microsoft calls this ClickFix.

What it looks like

• A fake CAPTCHA or human check, or a fake browser or Word error with a “How to fix” button
• Instructions to press Windows + R, then Ctrl + V, then Enter
• Or instructions to open PowerShell or Terminal and paste something in

Clicking the button has secretly copied a harmful command. Pasting and running it installs malware that can steal your passwords and files.

What to do

• Close the page. No real website, CAPTCHA or Microsoft error ever asks you to paste a command into Windows.
• Never paste and run anything you didn't type yourself, unless we've asked you to.

Already ran it? Disconnect from Wi-Fi or unplug the network cable, and call us on 707-755-8000 straight away. Don't sign in to anything else until we've checked your computer.