These McAfee and Norton alerts are almost certainly fake, browser-based notifications, not real antivirus warnings from Windows or installed McAfee/Norton apps.
On Windows 11, Microsoft Defender Antivirus is built in and always on for supported Windows versions, helping protect against viruses, spyware, and other malware. If Windows Security reports no threats and you do not have paid McAfee or Norton installed, the pop-ups are likely coming from malicious or spam websites that were allowed to send notifications.
To stop these pop-ups, do the following:
- Remove malicious site notifications in your browser
- In Microsoft Edge (typical on Windows 11/Surface devices):
- Open Edge.
- Open the notifications/permissions settings page (as described in the Q&A context: go to the Notifications section).
- Under the Allow list, look for strange or unrecognized sites (for example, domains that do not match sites you trust, often with random names).
- For each suspicious site, select the three dots and choose Remove or Block.
- In Google Chrome:
- Open Chrome.
- Open the notifications settings page (the Q&A context describes going to the list Allowed to send notifications).
- Find suspicious sites and remove them from the allowed list.
- Optionally, in both Edge and Chrome, turn off the setting that lets sites ask to send notifications so this cannot happen again.
- In Microsoft Edge (typical on Windows 11/Surface devices):
- Check for unwanted or fake browsers/extensions
- If pop-ups continue even after cleaning notifications, check for unwanted software such as a rogue browser (for example, “Wave browser” in the Q&A context) or suspicious extensions:
- In Edge or Chrome, open the extensions page and remove any extension you do not recognize or remember installing (especially ones related to ads, “security alerts,” or search helpers).
- In Settings > Apps on Windows, uninstall any unknown browsers or recently installed suspicious apps.
- If pop-ups continue even after cleaning notifications, check for unwanted software such as a rogue browser (for example, “Wave browser” in the Q&A context) or suspicious extensions:
- Rely on Microsoft Defender Antivirus
- For supported Windows versions, Microsoft Defender Antivirus is already included, free, and always on. It protects against viruses, spyware, and other malware.
- Avoid installing multiple third-party antivirus products at the same time, as having two different antimalware products installed and running can cause problems.
- Be cautious of fake security alerts
- Scammers commonly use McAfee or Norton logos and urgent wording (“your computer is infected with 7 viruses”, “renew now”) to trick users into paying or installing malware.
- If a page locks the browser or shows a fake support number, close the browser using Task Manager (Ctrl+Shift+Esc → end the browser process) or restart the PC, then clear the browser cache and avoid that site.
If Windows Security continues to show “no threats found” and these steps remove the fake notification sources, the system is not infected; the issue is with deceptive web notifications and/or unwanted software, not real McAfee or Norton apps.
References:
- Troubleshoot problems with detecting and removing malware
- Consumer antivirus software providers for Windows
- Microsoft resources and guidance for removal of malware and viruses
- How can I remove McAfee Norton Pop Ups on Windows 11? It is not showing up on Apps or Task Manager. - Microsoft Q&A
- How to stop pop ups in lower right of screen. They are done to look like McAfee alerts from geniusfun.co.za I have followed advice about stopping notifications and cookies but the pop ups keep coming back. - Microsoft Q&A
- Microsoft Defender Scam or Do I have a virus on my computer - Microsoft Q&A
- possible virus, computer locked - Microsoft Q&A
- Plethora of issues relating to windows and possibly security. - Microsoft Q&A