She reopened her browser offline . It tried to restore the previous session. Don’t let it. She went into history (Ctrl+H) and selected “Clear browsing data” for all time—cookies, cache, site settings. That wiped any malicious script trying to auto-load.

To effectively get rid of scam pop-ups, one must first understand their nature. These are rarely the result of a deep-seated virus destroying your hard drive. Instead, they are social engineering attacks. They fall primarily into two categories: "Scareware" and "Tech Support Scams."