You installed a fake browser update. What now?

A web page may insist that Chrome, Edge or another browser needs an urgent update and offer a download. Real browser updates should come through the browser's own controls or the vendor's verified installer. If you ran the offered file, treat the computer as potentially compromised even if the popup disappeared.

First, contain it​

1. Stop using the computer for banking, email and password-manager sign-ins. Disconnect its network connection if you see ongoing suspicious activity or remote control.
2. Do not run the installer again to 'check' it. Record its filename, download page and approximate time; this helps identify what else needs review.
3. Open Windows Security from Start, update protection if possible, then run a full scan. Follow its result and consider a Microsoft Defender Offline scan if Windows recommends deeper checking. Inspect recently installed apps and browser extensions.
4. From another trusted device, change passwords for important accounts used on the affected PC and review their active sessions. Start with email, then banking and other accounts that can reset passwords.

Decide whether cleanup is enough​

A clean scan cannot prove that no password or session data was copied before detection. If a security tool finds an infostealer, the computer behaves strangely or you cannot identify the changes, get qualified help or reinstall from trusted media after backing up personal files. Do not restore the suspicious installer. Microsoft's offline-scan instructions explain that option. Before any future installer, use our download checklist.

Check after cleanup​

Open the real browser's own About page and install its legitimate update. Recheck installed apps, extensions and account sign-in history the next day. If the fake installer displayed an administrator prompt that you approved, mention that to anyone helping you investigate; it may have had broader access than an ordinary download.