Antivirus-defence.com: what it is and how to remove it

Antivirus-defence.com is a fake website designed by scammers to profit from advertisement revenue. Most people accidentally venture to the site whenever they visit an already high-risk website, such as a peer-to-peer network or other places that distribute software cracks and similar insecure material.

Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

Clicked a notification from antivirus-defence.com and installed something? A free scan checks programs and browsers in one pass.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Antivirus-defence.com yourself 2 steps, about 6 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla Firefox

Antivirus-defence.com: antivirus defence com scam
Antivirus-defence.com as our 2022 report showed it.

Antivirus-defence.com: summary

NameAntivirus-defence.com
TypeScam, ads, redirect
InfiltrationCompromised websites, pop-up ads, potentially unwanted applications
Scam contentClaims that the security software subscription has expired and needs to be immediately renewed to remove the allegedly found threats. Asks to download potentially malicious software and enable push notifications
DangersLoss of finances due to fake subscriptions; redirects to other malware-laden, scam websites; installation of potentially unwanted or malicious software
Detection namesNo Microsoft detection name is known
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 10 more facts
DistributionNot recorded in the old report
DamageNot recorded in the old report
SymptomsNotification spam from a website
Evidence4 write-ups by security sites; details still limited
Domainsantivirus-defence.com
Ads shown asDesktop notifications
BrowsersChrome, Edge and Firefox
Installed on the PCNothing; a browser notification permission only
First seen2 August 2022
Facts checked7 October 2026

Is Antivirus-defence.com dangerous?

From our report of Aug 2022 · not reviewed since

Antivirus-defence.com is a malicious website that attempts to make users pay for unwanted software

Antivirus-defence.com is a fake website designed by scammers to profit from advertisement revenue.

Most people accidentally venture to the site whenever they visit an already high-risk website, such as a peer-to-peer network or other places that distribute software cracks and similar insecure material. In some rarer cases, redirecting to phishing websites might be a sign of adware infection, so this aspect must be investigated thoroughly.

When users enter the suspicious page, they are presented with unexpected news - they are told that their system has been infected with viruses and that they need to seemingly renew the security software license in order to remove the said threats.

The truth is that the scan is completely fabricated, and its authors are willing to profit from users purchasing software from security providers. Those who get convinced that their machines are in danger are more likely to buy the program, earning a small commission for the crooks.

Antivirus-defence.com: antivirus defence com scam
Antivirus-defence.com in our 2022 report.
Antivirus-defence.com: stop notifications on ie
Antivirus-defence.com in our 2022 report.

From our report of Aug 2022 · not reviewed since

More from our earlier report on Antivirus-defence.com

  • The interface of the pop-up windows is identical to those of McAfee or Norton security vendors, although neither of those has anything to do with the Antivirus-defence.com scam.
  • If you do not clean your browser from cookies and other web data, you see the unwanted ads return, or data continue being tracked.

Check your browser and PC

  • Address: antivirus-defence.com

How to remove Antivirus-defence.com

How to stop Antivirus-defence.com notifications

Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.

Nothing has to be uninstalled for the notifications themselves.

Which browser shows the ads?

  1. Step 1: Remove antivirus-defence.com from Chrome's notification list

    Chrome keeps a list of every site you once allowed to send notifications, and antivirus-defence.com is on it. Paste chrome://settings/content/notifications into the address bar, find antivirus-defence.com under Allowed to send notifications, open the three-dot menu next to it and pick Remove.

    Then click Add next to Not allowed to send notifications and type antivirus-defence.com, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Then, whichever browser you use

  1. Step 2: Scan the PC if you downloaded anything from the ads

    If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.

    In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

More removal instructions

For programs installed on the PC and older browsers. Open the one you need.

Remove adware from your system

As we already mentioned, most people who end up on scam sites have likely caused it themselves by clicking some booby-trapped link somewhere else.

It is recommended to stay away from places such as gambling, X-rated, torrents, and similar sites that often host these malicious links and scrips.

Another cause for browser redirects and an increased number of ads is adware. Thus, if you are dealing with persistent redirects to Antivirus-defence.com or similar suspicious websites, there is a good chance that your device is affected by potentially unwanted software. You could start by checking for programs installed on the system level:

Besides moving the unwanted app into Trash, removing adware might require a few more steps.

To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

Browser extensions are also known to cause unwanted redirects and ads.

If you are not quite sure when apps should or shouldn't be there, you should simply rely on or to take care of the adware removal process. This way, you won't have to worry that some of the components are left behind. We do recommend clearing browser caches to prevent data tracking with as well.

  • Enter Control Panel into the Windows search box and hit Enter or click on the search result.
  • Under Programs, select Uninstall a program.
  • From the list, find the entry of the suspicious program.
  • Right-click on the application and select Uninstall.
  • If User Account Control shows up, click Yes.
  • Wait till the uninstallation process is complete and click OK.
  • From the menu bar, select Go > Applications.
  • In the Applications folder, look for all related entries.
  • Click on the app and drag it to Trash (or right-click and pick Move to Trash)
  • Select Go > Go to Folder.
  • Enter /Library/Application Support and click Go or press Enter.
  • Look for any dubious entries in the Application Support folder and then delete them.
  • Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
Tips to avoid scams online

Online fraud is very popular - technical support and similar scams are simply very effective and require little to no effort to be such.

Crooks simply create fake websites with misleading statements about users' computer security and fill them with pop-ups that mimic reputable security vendors to make the scam more believable. Those who fall prey to scammers end up spending money on something they do not likely need in the process.

Antivirus-defence.com may also include various links to other websites, show intrusive ads, and redirect people to other scam pages. Thus, as a general rule, you should avoid it at all costs. Since users end up on the site accidentally, what can be done to protect themselves from such an outcome?

The truth is, avoiding online scams is relatively easy. Here are a few tips that might be helpful:

  • Avoid high-risk websites
  • Employ an effective ad-blocker to stop intrusive ads and redirects
  • Use powerful security software with web protection feature
  • Make sure you avoid adware installations by following the installation process of freeware - always choose Advanced/Custom settings and remove all the ticks next to optional components.
Antivirus-defence.com: antivirus defence com scam adware
Antivirus-defence.com in our 2022 report.
Stop the push notifications

While the Antivirus-defence.com site is mainly focused on tricking users into clicking affiliate links, it also uses additional means of monetization if users allow that.

Upon entering, people are offered to enable push notifications - a legitimate browser API feature is used to deliver any type of information directly into users' screens.

Unfortunately, fake websites are known to deliver advertisements of poor quality, often including more fake virus infection messages, get-rich-quick schemes, fake Flash Player updates, and similar scan content.

MS Edge (Chromium)

  • Open the Google Chrome browser and go to Menu > Settings.
  • Locate the Privacy and security section and pick Site Settings > Notifications.
  • Look at the Allow section and look for a suspicious URL.
  • Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
  • Open Mozilla Firefox and go to Menu > Options.
  • Click on Privacy & Security section.
  • Under Permissions, you should be able to see Notifications. Click the Settings button next to it.
  • In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
  • Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
  • Click on Safari > Preferences...
  • Go to the Websites tab and, under General, select Notifications.
  • Select the web address in question, click the drop-down menu and select Deny.
  • Open Microsoft Edge, and go to Settings.
  • Select Site permissions.
  • Go to Notifications on the right.
  • Under Allow, you will find the unwanted entry.
  • Click on More actions and select Block.
  • Open Internet Explorer, and click on the Gear icon at the top-right of the window.
  • Select Internet options and go to the Privacy tab.
  • In the Pop-up Blocker section, click on Settings.
  • Locate web address in question under Allowed sites and pick Remove.

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.

If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.

Recover files after data-affecting malware attacks

While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.

More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.

Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.

Questions about Antivirus-defence.com

Why do I get notifications from antivirus-defence.com when the browser is closed?

Chrome and Edge can keep a small part running in the background so that sites can deliver notifications, and Windows shows them in its notification area. That is why messages from antivirus-defence.com keep arriving with no browser window open.

The permission to send them was granted when someone clicked Allow on a prompt from that site, often disguised as a robot check or a video player. Closing the browser does not remove it; only the notification settings do.

Remove antivirus-defence.com from the allowed sites and the background messages stop. You can also stop the browser from running in the background in its system settings, but the permission is the real fix.

Did a notification from antivirus-defence.com infect my computer?

A notification cannot infect a PC. It is a short text with a link that the browser displays. Clicking it opens a page, and a page cannot install anything unless you agree to a download and run the file.

So the answer depends on what you did after clicking. Looked and closed: you are fine. Downloaded but did not open: delete the file.

Opened a downloaded file: uninstall what it added and scan the PC. Typed card or login details: contact the bank and change the password. In every case, remove antivirus-defence.com from the browser's allowed notifications so the messages stop.

Why does Antivirus-defence.com show me ads?

Because that is its whole purpose. Antivirus-defence.com is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.

They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.

Is antivirus-defence.com safe to visit?

No. The site antivirus-defence.com exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.

Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.

Which browser is sending the antivirus-defence.com notifications?

Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from antivirus-defence.com came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.

If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.

How do I know the ads come from Antivirus-defence.com?

Look for notifications from antivirus-defence.com. That is the trace Antivirus-defence.com leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.

A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.

Will Focus or Do not disturb stop the notifications?

Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.

Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.

Did clicking Allow install anything on my PC?

No. Allowing notifications stores a permission in the browser and nothing else. No file is downloaded and no program is added to Windows, which is also why antivirus scans find nothing. The risk comes later, from the notifications themselves: they lead to scam pages, fake updates and phishing forms.

Remove the permission in each browser where you allowed it. If you clicked a notification and downloaded something afterwards, delete that file and run a Microsoft Defender full scan and offline scan.

An ad showed a phone number and I called it. What now?

The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.

If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.

Will Fortect remove Antivirus-defence.com?

No program removes Antivirus-defence.com itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.

What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.

If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.

Sources

  1. Computerworld: What's a Peer-to-Peer (P2P) Network? (read October 7, 2026)
  2. WeLiveSecurity: Malicious scripts in compromised websites and how to protect yourself (read October 7, 2026)
  3. Wikipedia: Freeware (read October 7, 2026)
  4. Google Chrome Help: Use notifications to get alerts (no longer online) (read October 7, 2026)
  5. FTC: How to recognize, remove and avoid malware (read October 7, 2026)

More removal guides

Remove Immediate Action Required

Immediate Action Required is a fake notification that might pop-up out of nowhere and prompt users to download useless bogus software Immediate Action Required is a scam that users mightAdwareMedium riskUgnius Kiguolis ·

Remove ReceiverHelper Mac virus

ReceiverHelper virus is a high threat to your personal safety and Mac security ReceiverHelper is a harmful application targeting Mac devices, classified under the Adload malware family. It is notoriousAdwareMedium riskJake Doevan ·

Remove Casalemedia

Casalemedia is a legal advertising service but is sometimes abused by crooks to gain personal income Casalemedia is a legitimate advertising service that provides assistance in monetizing on online contentAdwareMedium riskJake Doevan ·

Remove D1ue3yi0hkdsdl.cloudfront.net ads

D1ue3yi0hkdsdl.cloudfront.net ads is the content related to scam campaigns and fake errors or warnings D1ue3yi0hkdsdl.cloudfront.net is the program that causes notifications and advertisements that may appear unexpectedly, preventing you fromAdwareMedium riskJulie Splinters ·

Questions and experiences: Antivirus-defence.com

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,442 members already hereReading, writing, commenting and voting. 0 verified · 167 joined this year