Defender-box.xyz ads promote useless tools and do that with fake errors and warnings or system alerts

Defender-box.xyz adware controls various processes on the machine, and it shows scam messages, fake errors, and virus warnings to trick people into paying for legitimate antivirus software or upgrades of such tools. However, these sites cannot access the system to check for malware.
The program has no permission to do so, but it can trick people into allowing those spam notifications and pop-up advertisements that can come to the screen when web browsers are closed and not in use. The adware is intrusive, and these intrusive activities are linked to the program that runs in the background.
| Name | Defender-box.xyz |
|---|---|
| Type | Adware, push notifications virus, redirect |
| Category | Potentially unwanted program |
| Serving IP | 172.67.169.53 |
| Distribution | Freeware infections, deceptive sites, other PUPs |
| Issues | These sites cause issues with computer performance, browser tracking, and privacy issues |
| Removal | Threats can be terminated and malware removed using AV tools |
| Repair | Running the app like FortectIntego can be helpful with changes in system settings |
Defender-box.xyz ads and push notifications can display fake McAfee virus scanner results with lists of malware and detections not related to the machine. These fake scans show that information to scare victims into allowing additional downloads and installations. There are no claims that could be true.[1]
This is why you should remove the infection properly and do that as soon as those pop-ups appear on the machine and start to bother you on a daily basis. However, note that anti-malware tools are needed here since the program running on the machine is the one that needs to be removed, not only those Defender-box.xyz ads.
Removing the infection
The threat is causing deceptive content that appears on the screen. These infections can run in the background and cause all actions related to the Defender-box.xyz ads. Threat removal tools that are running on the AV detection engines can find the threat and remove all potentially dangerous files from the machine.
There are infections that can be additionally injected into the system, so this full system scan using antivirus applications can solve more issues with the machine than the adware infection. Defender-box.xyz push notifications and other threatening behavior can be stopped when the adware is terminated.

Run application like SpyHunterCombo Cleaner or MalwarebytesMalwarebytes that can check the machine and indicate potential threats as soon as those notifications or browser spam appears on the screen. This way, you can find all intruders and stop them before additional issues occur. Then you can also reset web browsers if those get affected by the PUP.
It is advised to check those tools no matter what because injections of Defender-box.xyz ads and other browser-based applications can mean that behavior is not stopped when the adware gets removed. All the altered settings can be set back to default manually.
Remove unwanted notifications from Google Chrome (desktop):
- Open Google Chrome browser and go to Menu > Settings.
- Scroll down and click on Advanced.
- Locate Privacy and security section and pick Site Settings > Notifications.

- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

Remove unwanted notifications from Google Chrome (Android):
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Scroll down to the Sites section.
- Locate the unwanted URL and toggle the button to the left (Off setting).

Remove unwanted notifications from Mozilla Firefox:
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click the Settings button next to it.

- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.

Remove unwanted notifications from Safari:
- Click on Safari > Preferences…
- Go to the Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.

Remove unwanted notifications from MS Edge:
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.

- Toggle the switch to the left to turn notifications off on Microsoft Edge.

Remove unwanted notifications from MS Edge (Chromium):
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.

Remove unwanted notifications from Internet Explorer:
- Open Internet Explorer, and click on the Gear icon at the top-right of the window.
- Select Internet options and go to the Privacy tab.
- In the Pop-up Blocker section, click on Settings.
- Locate web address in question under Allowed sites and pick Remove.

Issues with the push notifications virus
Defender-box.xyz is one of many scamming sites[2] that can trigger fake messages and tries to convince people that they need to protect their personal files and eliminate threats with promoted software. However, by trusting these sites and claims, users can lose their sensitive information and banking details instead.
Experts[3] report these issues with potentially unwanted programs and note that users should ignore any of these notifications, messages, and Defender-box.xyz ads. Clicking on any of these alerts and pop-ups can lead to legitimate sites for the AV tools but trigger the download of a dangerous program.
These programs try to trick people into purchasing subscriptions and visiting sites like this that can be affiliated with third-party advertisers and sponsors. Deceptive marketing methods can help lead to purchases and view collections that these intrusive programs are designed for.
Defender-box.xyz ads are not related to legitimate AV providers and program operators, so make sure to ignore those messages because falling for scams like this can lead to phishing pages, other scamming campaigns, and malicious websites that can result in malware injections and serious damage.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Was this guide helpful?
Be the first to comment