Share via

Already Asked Question on Fake McAffee Pop Up, but It's Still Happening

Anonymous
2025-03-28T22:31:30+00:00

Hello,

I have cleared out my cookies, both on Edge and Internet Explorer, but the following pop up continues to intrude -- please see photo of fake McAffee scan below.

The pop up happens on two sites, a newspaper and a discussion board, both on Edge. I also visit the discussion board on Firefox, but there are no fake McAffee pop ups there. I never press the "ok" on the pop up so I assume that a scan is not really in progress.

I also looked up the following instructions, "To get rid of fake McAfee pop-ups, block notifications from suspicious sites, clear your browser's cache and history, remove any suspicious extensions, and run a virus scan." I do not see any allowed notifications, and, again, I cleared the cache and history and am not sure what "suspicious extensions" are, or even plain "extensions."

A hour or so later: I found the following on stopping notifications:

  1. "Microsoft Edge (legacy version) Open Windows Settings app (not Edge's) and go to System → Notifications & Actions, scroll down to Notifications, and set "Get notifications from apps and other senders" to Off.
  2. Microsoft Edge (Chrome-based, Version 91+)

Go to edge://settings/content/notifications in the address bar and disable Ask before sending (recommended). If there are any entries in the Allow section, click on the ⋯ menu and select Remove for each one."

I'm not sure what kind of Edge I have: It's described as Version 134.0.3124.93, but I don't know if that a legacy version or Chrome-based.

I turned off all notifications by following both instructions, and now my notification tab looks as follows -- please see large photo below. I hope this stops the fake McAffee pop ups, but I would like to know the downside of stopping notifications? Does that mean I won't be notified of Windows Updates? Or will notifications stop from my Outlook calendar, which are sent to my email? Basically, I'm asking what websites will be affected - if I get newsletters from the Washington Post, will they stop?

When I went into Notifications, I also noticed that the following "website," almost the same URL that shows up on the fake McAffee pop ups, is listed as "Blocked" in "All Permissions"; however, I did not put it there and have no idea how it got there. The only difference between the two URLs is that the one listed above has a 443 at the end, whereas the one on the current fake McAffee pop up -- please also see large photo below -- is the following, without the 443.

I don't know if the scammer removed the 443 because the website with the 443 was already listed as "blocked" in notifications, though, again, I did not put it there.

If anyone can help with the whole issue, I'd appreciate it, and also clarify the disadvantages off stopping all pop ups, which -- I think? -- I did, as shown in the photo immediately below.

Thanks, Daffy D

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

Answer accepted by question author

  1. Rob Koch 25,875 Reputation points Volunteer Moderator
    2025-03-29T17:48:36+00:00

    Daffy,

    Though EmilyS726, has already provided most of the details you need for managing these website Push Notifications and tried to explain them, I'll just add some background and provide the official Microsoft page for managing them as additional information.

    Manage website notifications in Microsoft Edge - Microsoft Support

    When I was trying to answer someone else's questions about these notifications, I fouind this old history article about them that explains where they came from (Google), why they exist and when Microsoft and Apple added them to their own browser, which for Microsoft was likely when they began using the Google supported Chromium Open-source browser as the base for their new Edge browser.

    Behind Web Push Notifications: History of Web Push | Braze

    So as usual, we have Google to thank for these intrusive advertising popups used by websites, while Apple and Microsoft came along for the ride in order to provide similar support in their own browsers, in Microsoft's case due to the fact they're using the same core browser.

    In a deeper sense, these particular popup notifications undoubtedly also use the Toast Notifications interface that Microsoft included in Windows over a decade ago that allows the display of such messages by apps that aren't currently open, which the Website Push Notifications are also able to do. Though it's a technical page, those Toast Notifications are discussed at this Microsoft page and you'll easily see the similarity of the one displayed there to the Website Push Notifications you're receiving.

    Toast notifications - Windows apps | Microsoft Learn

    You'll note that some others have posted in your thread about 'rouge' applications or browser extensions displaying popups, which though possible are far less common nowadays due to the fact that Website Push Notifications are displayed by Windows itself once you initially press the "allow" button on an initial; popup that's displayed, meaning they aren't malware as such won't ever be detected by any antivirus or similar security app as malicious. That's why the malicious advertisers love them, since they're just an HTML popup and won't be automatically blocked for you if you press the Allow button by mistake, as many people do.

    Though that last image in your first post looks like it might not be a notification popup. I suspect that it was simply launched separately by the other 'Scan in Progress' Website Push Notification' popup that clearly is due to the website and OK button displayed first.

    Yes, the combinations here can be complex, but that's the point, since the last thing the malicious advertisers want is for any of this to be easy or seem obvious to allow you to fix the annoying popups without contacting them, so they can either sell you something or steal your personal information or identity, which is often their true goal.

    Rob

    3 people found this answer helpful.
    0 comments No comments

Answer accepted by question author

  1. EmilyS726 227.6K Reputation points Independent Advisor
    2025-03-29T06:27:31+00:00

    Hello Daffy,

    Based on your screenshots and descriptions, I don't think these are "notifications". They are pop ups particularly related to those two sites.

    Scammers use various methods to trigger these pop-ups. Pop-ups are a form of online advertising. They are often integrated into websites or applications through ad services. Many websites (including legitimate websites) use third-party advertising services to display ads. Sometimes, these ad services might inadvertently allow scam ads to be displayed. This does not mean the website itself is malicious or the pop up is malicious, but it indicates a lack of stringent ad vetting. The ads content is trying to create a non-existing issue to get you to react and engage, then you might end up contacting whatever website they will take you to in order to contact them once you engage, once contacting them, they will scam you.

    That said, on Edge, use this setting link to launch the settings related to popups:

    edge://settings/content/popups?search=pop

    You can turn on the master toggle to disable all popups.

    OR, you can turn off the master toggle, but then make sure you add those two websites you experienced the pop up in the "block" section. Not necessary the https://tnmc6xr71o.sbs:443 site as that's the popup direct site. But the actual two websites you said where the popup happened.

    2 people found this answer helpful.
    0 comments No comments

20 additional answers

Sort by: Most helpful
  1. EmilyS_726 16,460 Reputation points Volunteer Moderator
    2025-03-30T22:23:28+00:00

    While restoring your system can solve many issues, it won't resolve this specific problem. It's similar to renovating your home: you can revamp the interior, switch up everything inside, or even revert to a retro '80s style, but none of these changes will prevent unwanted visitors from knocking on your door unless you take measures to block them.

    The pop-ups OP was experiencing are external factors triggered by the websites visited, not by Windows itself. Therefore, modifying the registry is also a moot point. Only valid method is to simply block the pop ups for the sites they are from.

    3 people found this answer helpful.
    0 comments No comments
  2. MartMcd 2,585 Reputation points Volunteer Moderator
    2025-03-30T23:43:31+00:00

    Moderator note.

    The OP in this thread has indicated that the problem is resolved and Marked an answer.

    Melvin Klassen To continue to argue about resolving a non existent infection is irrelevant to the thread.

    to prevent the thread going further off topic , it will be locked.
    please keep threads on topic and address your responses to the original poster rather than argue with other contributors.

    from the Microsoft Community Code of Conduct
    Please do:

    • Keep conversation threads on track. It's okay to disagree with another user's post, but don't take the thread off track to do so.
    • Always address your comments to the person who asked the initial question, not the other posters.
    2 people found this answer helpful.
    0 comments No comments
  3. CrazyKats 15,500 Reputation points Volunteer Moderator
    2025-03-30T22:00:40+00:00

    I would do a factory restore or find a trustworthy extensions remover before I fiddled with the registar.

    Best,

    Daffy D "> Hello Melvin,

    Thank you for helping and your detailed replies. Emily's advice is working, but I'm also giving your replies a "solve" because they're food for thought and I learned a lot from both of you.

    I would do a factory restore or find a trustworthy extensions remover before I fiddled with the registar.

    Best,

    Daffy D

    A Factory Restore is too drastic for this issue.

    Most of the time a simple PC Restart gets rid

    of these scam pop ups.

    Extensions are easily removed in Edge under

    Settings, Extensions, click the 3 dots next to the Extension

    and Remove from Edge.

    There's no need for a 3rd party software to do that.

    I would also recommend running Malwarebytes Free

    to make sure there's no virus on your PC.

    2 people found this answer helpful.
    0 comments No comments