05/06/2026
We have seen an increase in reported fake McAfee infection alerts and other “virus warning” pop-ups across client environments.
These alerts are not typically caused by an actual McAfee infection. In most cases, they are caused by public websites that display advertisements. This includes common local news and media websites such as WHAS, WDRB, Fox, and similar sites. Some of the ads displayed on these websites may be compromised or malicious and can trick a browser into allowing notifications.
Once notifications are allowed, the website can use browser notifications along with the Windows notification feature to display scary or misleading messages on the computer.
These messages are designed to look urgent and convincing. They may claim the computer is infected, ask the user to click a link, renew a subscription, call a support number, or download software. Users should not click these messages.
To help reduce this issue, we are requesting permission to make a blanket configuration change across managed computers. This change would:
· Disable browser notifications where possible
· Disable or limit Windows notification pop-ups related to these alerts
· Remove any websites currently listed as “Allowed” to send notifications
· Help prevent users from accidentally re-enabling suspicious notification permissions
This change should not impact normal business use of the computer. Users will still be able to access websites, email, Microsoft 365, business applications, and standard browser functions. The main impact is that websites will no longer be able to send pop-up notifications through the browser or Windows notification center.
If you need any assistance feel free to reach out. We can remotely troubleshoot and make the corrective settings for you.