Brokenbad.biz ads: what it is and how to remove it
Brokenbad.biz pop-up ads control the online traffic on the machine that the PUP manages to infect. This adware-type intruder can infect various systems and affect devices, including macOS and Windows or Android machines.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A quick scan confirms that the brokenbad.biz notifications did not lead to anything being installed.
Do it yourself · free Remove Brokenbad.biz ads yourself 2 steps, about 6 minutes, no software needed.
Brokenbad.biz ads: summary
| Distribution | Freeware installations, other PUPs, deceptive online material |
|---|---|
| Name | Brokenbad.biz |
| Type | Adware, redirect virus, push notification virus |
| Category | Potentially unwanted program |
| Problems | Redirects to ads and sponsored pages expose users to potentially dangerous material online |
| Versions | 1.brokenbad.biz; 2.brokenbad.biz; 3.brokenbad.biz; 0.brokenbad.biz; 6.brokenbad.biz; 9.brokenbad.biz; 10.brokenbad.biz, .etc |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 10 more facts
| Detection names | No Microsoft detection name is known |
|---|---|
| Damage | Not recorded in the old report |
| Symptoms | Notification spam from a website |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | brokenbad.biz |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 25 August 2021 |
| Facts checked | 6 October 2026 |
Is Brokenbad.biz ads dangerous?
From our report of Aug 2021 · not reviewed since
Brokenbad.biz is the redirect virus that aims to show push notifications on the screen
Brokenbad.biz pop-up ads control the online traffic on the machine that the PUP manages to infect.
This adware-type intruder can infect various systems and affect devices, including macOS and Windows or Android machines. The intrusive and annoying infection leads to privacy issues since the ad-supported service can track, record, and collect information about users and visitors.
When you allow notifications to appear on the screen by interacting with the pop-up on the browser, your screen gets filled with intrusive messages that lead to other pages and sponsored ads.
This behavior creates a circle of reroutes, and it becomes difficult to access anything else don't the web besides sponsored ads. You need to remove the PUP that caused this behavior to stop all the notifications. That may seem difficult, but we will explain how the adware works and what to do when you caught the PUP.
Brokenbad.biz pop-up is the adware program that aims to trick people into allowing push notifications from this or different advertising sites. The Allow or Block pop-ups, other forms of "allow or else" content on the site, tricks people into interacting with the site, so the additional content is allowed even though you only clicked on the Block button or Deny option.
The PUP controls these intrusive programs, so when you continuously experience the redirects, pop-ups, banners, and other material, you can be sure that the issue is triggered by the intruder already running on your machine. The infiltration happened silently, so it is difficult to pinpoint a time when the infiltration happened.
However, when these Brokenbad.biz pop-up ads appear, the adware program possibly already affected important parts of the machine. You need to control that immediately, and the best way possible is to run anti-malware tools like or . These are quick AV detection-based programs that can find and eliminate PUPs or any other intruders for you.
From our report of Aug 2021 · not reviewed since
More from our earlier report on Brokenbad.biz
- You can achieve the best results by using anti-malware tools, so the system is fully cleared from any intruders
- Running can help fix all the issues with virus leftovers
Check your browser and PC
- Address:
brokenbad.biz
How to remove Brokenbad.biz ads
How to stop Brokenbad.biz notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove brokenbad.biz from Chrome's notification list
Chrome keeps a list of every site you once allowed to send notifications, and
brokenbad.bizis on it. Pastechrome://settings/content/notificationsinto the address bar, find brokenbad.biz under Allowed to send notifications, open the three-dot menu next to it and pick Remove.Then click Add next to Not allowed to send notifications and type brokenbad.biz, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove brokenbad.biz from Edge's notification list
Open Settings and more (the three dots) > Settings > Privacy, search, and services > Site permissions > All permissions > Notifications. Remove
brokenbad.bizfrom the Allowed list, then click Add site next to Not allowed to send notifications and enter it there.Edge is built into both Windows 11 and Windows 10, so check it even if you normally use another browser. If the notifications came with the Edge logo, this is the browser that holds the permission.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Microsoft Edge
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Step 1: Remove brokenbad.biz from Firefox's notification permissions
Open the menu (three lines) > Settings and click Permissions and data in the left list, then Notifications. Select
brokenbad.biz, click Remove Website and confirm with Save Changes.In versions older than Firefox 152 the same list sits under Privacy & Security, behind a Settings button next to Notifications. Firefox shows these notifications only while it is running, on Windows 11 and Windows 10 alike.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Mozilla Firefox
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Our tested steps are for Windows 11 and 10. For Safari (Mac), use the instructions below.
Instructions for Safari (Mac)
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
More removal instructions
For programs installed on the PC and older browsers. Open the one you need.
Without eliminating PUP Brokenbad.biz pop-ups cannot stop
The annoying adware is intrusive and possibly damaging because the page and these Brokenbad.biz ads control the system's process by altering preferences and settings.
There are various issues that the PUP can trigger related to the speed of the internet, the performance of the computer, and other online browsing activities.
However, if you do not remove the adware program, these issues with notifications, pop-up ads, banners, and other problems regarding the online browser remain and can occur again. You need to manually change those settings, but eliminating the PUP is also crucial.
Remove unwanted notifications from Google Chrome (desktop):
Remove unwanted notifications from Google Chrome (Android):
Remove unwanted notifications from Mozilla Firefox:
Remove unwanted notifications from Safari:
Remove unwanted notifications from MS Edge:
Remove unwanted notifications from MS Edge (Chromium):
Remove unwanted notifications from Internet Explorer:
Besides the proper PUP removal, it is important to recover after the Brokenbad.biz ads termination. Your device can be affected for a while until the symptoms occur, so if the adware program changed settings and altered files, you need to fix all of this. AV tools cannot do all the things, so you should rely on for this job.
The tool can find anything that the virus or any other infection left behind and clear those issues by repairing damaged DLLs, registry entries, , and different system files. The procedure is quick and shouldn't cause any additional issues. You can quickly move on to normally using the device.
Brokenbad.biz, unfortunately, causes issues with web browsing, so your Mozilla Firefox, Safari, Internet Explorer or a different application starts performing poorly. You can change all the issues like uninstall added extensions, applications manually and stop the intrusive activities.
That is not difficult. Since the main target of such pieces is the Google Chrome browser, you can see the guide showing how to clean the application.
Delete malicious extensions from Google Chrome:
Clear cache and web data from Chrome:
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
Brokenbad.biz ads may not start immediately after the infiltration, but that is the bad thing because PUP, in the meantime, can alter more crucial settings and control the persistence of the adware itself. As for the infiltration, the most common way to deliver a browser-based program - freeware bundling.
This marketing method is one of the shadiest techniques that experts always note users about. PUP developers pre-pack their products alongside popular freeware and distribute these bundles around via torrent pages, other deceptive and misleading sites.
If you go for the quick or recommended option, all included pieces get automatically installed, so the intrusive Brokenbad.biz PUP also finds its way to your machine. Always go for Advanced or Custom options during freeware installations and choose legitimate sources to avoid any instances like this.
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Locate the unwanted URL and toggle the button to the left to OFF.
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click Settings button next to it.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Click on Safari > Preferences...
- Go to Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the window's top-right.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.
- Toggle the switch to the left to turn notifications off on Microsoft Edge.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
- Open Internet Explorer, and click on the Gear icon at the top-right of the window.
- Select Internet options and go to the Privacy tab.
- In the Pop-up Blocker section, click on Settings.
- Locate web address in question under Allowed sites and pick Remove.
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies, and other site data, as well as Cached images and files.
- Click Clear data.
- Click on Menu and select Settings.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Uninstall from Android
Uninstall unwanted programs from Android device:
- Go to Settings -> Apps/Applications.
- Expand the full list of the installed apps.
- Scroll through the list and tap on a suspicious application once.
- Tap on it and select Uninstall.
- If the Uninstall option is unavailable, the app may require additional permissions to be revoked first.
- Reboot the device.
Clear storage and cache for Google Chrome or other apps::
- Go to Settings > Apps/Applications.
- Expand the full list of the installed apps.
- Tap on Chrome and select Storage & cache.
- Clear storage and clear cache of the app.
If you are seeing ads on top of other apps but are not sure what is causing it, perform the following steps:
- Go to Apps/Applications.
- Select Special App access.
- Tap on Display over other apps.
- Eliminate apps with these access rights enabled.
Access your website securely from any location
When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.
If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.
Recover files after data-affecting malware attacks
While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.
More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.
Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.
Questions about Brokenbad.biz ads
How do I stop notifications from brokenbad.biz?
Remove its permission in the browser. The bottom line of each notification names the browser, so open that browser's notification settings and look under Allowed. Remove brokenbad.biz and any other site you do not recognise.
In Chrome and Edge this is under the site settings for notifications; in Firefox it is under Settings, Permissions and data, Notifications. Do this in every browser profile, because each one keeps its own list.
Restart the browser and wait a few minutes. If a message still arrives, read its bottom line again: the sending address can differ from the site you remember, and that is the entry still left in the list.
I clicked a notification from brokenbad.biz. What should I do?
If you only opened the page and closed it, nothing else is needed besides removing the permission from brokenbad.biz. If the page asked for card details, a phone number or a password and you entered them, act on that: call the bank to block the card, or change the password from another device.
If it offered a download, delete the file unopened, or uninstall it from Installed apps if you ran it, then run a full scan. If you called a number shown on the page, follow the steps for callers in this guide. Finally, remove the permission so that no more messages arrive.
Why does Brokenbad.biz show me ads?
Because that is its whole purpose. Brokenbad.biz is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.
They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.
Is brokenbad.biz safe to visit?
No. The site brokenbad.biz exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.
Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.
Which browser is sending the brokenbad.biz notifications?
Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from brokenbad.biz came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.
If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.
How do I know the ads come from Brokenbad.biz?
Look for notifications from brokenbad.biz. That is the trace Brokenbad.biz leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.
A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.
Did clicking Allow install anything on my PC?
No. Allowing notifications stores a permission in the browser and nothing else. No file is downloaded and no program is added to Windows, which is also why antivirus scans find nothing. The risk comes later, from the notifications themselves: they lead to scam pages, fake updates and phishing forms.
Remove the permission in each browser where you allowed it. If you clicked a notification and downloaded something afterwards, delete that file and run a Microsoft Defender full scan and offline scan.
Will Focus or Do not disturb stop the notifications?
Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.
Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.
An ad showed a phone number and I called it. What now?
The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.
If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.
Will Fortect remove Brokenbad.biz?
No program removes Brokenbad.biz itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Techtarget: Potentially unwanted program (read October 6, 2026)
- Speedupnew: Registry Tweaks are Dangerous (read October 6, 2026)
- Sensavirus: Senzavirus (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)