Malicious Notifications or Popups on Browsers
Users may receive repeated browser notifications claiming that the computer is infected, files are encrypted, virus protection is disabled, or immediate action is required.
These notifications are generally caused by a website that was unintentionally allowed to send notifications through Microsoft Edge. The browser generating the notification may be identified at the bottom of the popup, such as “via Microsoft Edge.”

Malicious Notifications or Popups in Microsoft Edge
- Open Microsoft Edge.
- Click the three dots in the upper-right corner of the browser.

- Select Settings.
- Use the Settings search bar to search for Notifications.

- Open the notification settings and locate the Allowed to send notifications section.
- Remove or block any websites that the user does not recognize.
Malicious Notifications or Popups in Google Chrome
- Open Google Chrome.
- Click the three dots in the upper-right corner of the browser.

- Select Settings.
- Enter Notifications in the Settings search bar.

- Select Site settings, and then select Notifications.

- Locate the Allowed to send notifications section.
- Click the menu next to any website the user does not recognize, and then select Remove or Block.

Browser Search Engine or Startup Page Was Changed
A malicious or unrecognized website may also change the browser’s default search engine or startup page.
Solution: Review the browser settings and restore the user’s preferred search engine and startup options.
- Open the affected browser’s Settings menu.
- Use the Settings search bar to search for Search engine.

- Review the selected default search engine and change it back to the user’s preferred option if necessary.
- Search for Startup in the Settings search bar.

- Review the browser’s startup behavior and remove any unrecognized websites or pages.
- Select the user’s preferred startup option, such as opening a new tab page.
Additional information:
Do not click links, buttons, or phone numbers displayed in suspicious browser notifications. These messages may imitate legitimate antivirus or Windows security alerts.
Removing a website from the browser’s notification permissions should stop future notifications from that website. If the notifications continue, verify which browser is named at the bottom of the popup and repeat the notification-setting steps in that browser.