Chainthorn.com ads: what it is and how to remove it
Chainthorn.com is a push notification virus that is closely associated with adware, although users might encounter the site when redirected from somewhere else. Just as many other sites of such kind, it asks users to allow notifications to be shown to view the alleged content which, in fact, does not even exist.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
If notifications from chainthorn.com led you to download something, a free scan can check the PC for anything that came with it.
Do it yourself · free Remove Chainthorn.com ads yourself 2 steps, about 6 minutes, no software needed.
Chainthorn.com ads: summary
| Name | Chainthorn.com |
|---|---|
| Type | Push notification virus |
| Category | Adware/PUP |
| Infiltration | Software bundling, third-party sites |
| Main dangers | Installation of other potentially unwanted software, money loss, malware infection |
| Termination | Use security software or our manual removal guide below |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 11 more facts
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Symptoms | Notification spam from a website |
| Evidence | 5 write-ups by security sites; details still limited |
| Domains | chainthorn.com |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 5 December 2019 |
| Facts checked | 6 October 2026 |
Is Chainthorn.com ads dangerous?
From our report of Dec 2019 · not reviewed since
Chainthorn is a suspicious website that tries to push notifications directly to users' desktops
Chainthorn.com is a push notification virus that is closely associated with adware, although users might encounter the site when redirected from somewhere else.
Just as many other sites of such kind, it asks users to allow notifications to be shown to view the alleged content which, in fact, does not even exist. The adware has also earned the name of Chainthorn virus due to the secrecy that its activities are based on. Besides, extensions related to this adware have been mostly spotted on Google Chrome web browsers, according to users' reports.
As soon as users agree to Chainthorn.com request, they will start receiving deceptive pop-ups, deals, banners, offers, flashing windows and other intrusive content on Google Chrome, Safari, Mozilla Firefox, or any different installed browser. What is more, the activities may continue after the browser is turned off, and notifications will be delivered directly to desktops.
Without a doubt, the best way to remove Chainthorn notifications and pop-ups is not to enable them in the first place, although web browser setting tweak can fix the issue (we explain how to do that below - check the bottom section of the article).
Nevertheless, if an adware program is involved, you will have to delete the potentially unwanted application from your device to stop redirects to scam, phishing, and other malicious sites similar to Chainthorn.com.
By itself, adware is not considered to be malicious like malware, although the increasing security and privacy concerns from industry experts are rising. Therefore, adware infections like Chainthorn.com should never be underestimated, as careless web browsing on Google Chrome, Safari, Mozilla Firefox, Internet Explorer or another browser might lead you to phishing, scam or even malware-laden websites.
While intrusive pop-ups and other sponsored content should be big enough reason to start Chainthorn removal, another alarming feature of adware is information tracking. In most of the cases, the PUP places tracking cookies, web beacons, and other tracking technologies on your browser, which can track the following information:
Even though this information is mostly considered to be anonymous, (nevertheless, in some countries or the US states, IP address is considered to be private data), you should not allow unknown parties affiliated with Chainthorn.com developers tracking you. Not only will alter the way you browse the internet, but it might also offer you goods or services, not of good quality.
Continuously, some adware programs, possibly Chainthorn.com also, might collect not only browsing-related data but track some private details such as the name/surname, residence address, billing address, or email of the user. Such information is not the one you would want to reveal to scammers or third-party developers as it might be misused for illegitimate purposes in the future.
Thus, you can negate all the adverse effects by removing the potentially unwanted program that is associated with Chainthorn.com developers. After that, experts recommend scanning the device with to fix virus damage.
Also, note that Chainthorn.com might be capable of modifying web browser applications via the homepage and new tab sections. These changes can be reversed by terminating the potentially unwanted program only. This also includes cleaning infected web browser applications from bogus extensions, add-ons, and plug-ins. If you do not eliminate such components, the adware might return easily.
Continuously, potentially unwanted applications such as Chainthorn.com virus might be capable of eating your system's resources such as the CPU and GPU power. This sometimes is necessary in order to let the program push an excessive amount of adverts. If this happens, you might find your system and software starting to struggling. Afterward, it will supposedly prevent you from carrying out quality-full work.
- IP address
- Search queries
- Goelocation
- ISP
- Cookies
- Technical details
- Sites visited and the visit duration;
- Links clicked, etc.
From our report of Dec 2019 · not reviewed since
PUPs are not always a minor threat - avoid installing them in the first place
Browser redirect viruses might be pretty harmless, while, in other cases, might render the computer vulnerable to cyber attacks, especially if users start clicking on suspicious ads and sponsored content.
Therefore, it is best to avoid potentially unwanted programs to bypass unnecessary risks.
The prevalence of PUPs can be explained by its deceptive distribution method - software bundling. In most of cases, users are quite hasty when it comes to the installation of freeware or shareware. However, free applications from third-party sites often include additional components that are often shady - adware, browser hijackers, or even malware like cryptominers.
Thus, when installing new software, pay close attention to the installation instructions, and never rush through steps. Additionally, always make sure you opt for Advanced/Custom settings instead of Recommended/Quick ones, as that's where most of the optional programs are hidden. Simply untick all the pre-selected boxes before proceeding, and you will avoid the installation of PUPs.
From our report of Dec 2019 · not reviewed since
More from our earlier report on Chainthorn.com
- To make sure your system is running well after the infection, scan it with
Check your browser and PC
- Address:
chainthorn.com
How to remove Chainthorn.com ads
How to stop Chainthorn.com notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove chainthorn.com from Chrome's notification list
Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste
chrome://settings/content/notificationsinto the address bar.Under Allowed to send notifications, open the menu next to
chainthorn.comand choose Remove or Block, and do the same for any other address you do not recognise.Next to Not allowed to send notifications, click Add and enter chainthorn.com, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Google Chrome
Google Chrome
- Click Menu and select Settings
- Click Advanced and go to Privacy and security > Site Settings > Notifications
- You should see Chainthorn.com under Allow
- Pick More Actions and then click on Block and then Remove
Remove from Google Chrome
Adware and other PUPs often leave web browser settings altered, even after its removal. Thus, make sure you reset Google Chrome as follows:
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Step 1: Remove chainthorn.com from Edge's notification list
Edge stores its own permission list, separate from Chrome's, and it is often the browser behind these pop-ups on Windows 11 and Windows 10.
Go to Settings > Privacy, search, and services > Site permissions > All permissions > Notifications, or paste
edge://settings/content/notifications. Removechainthorn.comfrom Allowed, then add it under Not allowed to send notifications. Notifications that show the Edge logo come from this list.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Microsoft Edge
MS Edge
- Click on More and select Settings
- Now pick View advanced settings
- Find Chainthorn.com and turn off notifications from being shown
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Step 1: Remove chainthorn.com from Firefox's notification permissions
In Firefox the permission sits in Settings > Permissions and data > Notifications (in older versions Privacy & Security > Notifications > Settings). Select
chainthorn.comin the list, click Remove Website, and confirm with Save Changes.Firefox only shows these notifications while it is open, so if they stopped after closing Firefox, this is the browser to clean. The steps are the same on Windows 11 and Windows 10.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Mozilla Firefox
Mozilla Firefox
- Select Menu and then click Options
- Go to Privacy & Security > Notifications
- Select Settings find Chainthorn.com entry
- Pick Block from the drop-down menu
Remove from Mozilla Firefox (FF)
You should fully reset Mozilla Firefox after PUP termination:
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Our tested steps are for Windows 11 and 10. For Safari (Mac), use the instructions below.
Instructions for Safari (Mac)
Safari
- Click on Safari and then select Preferences
- Pick Notifications
- Locate Chainthorn.com and select Deny
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Macs are not immune to adware. If you are suffering from PUP infection, perform these steps:
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
More removal instructions
For programs installed on the PC and older browsers. Open the one you need.
Remove Chainthorn.com notifications by uninstalling adware applications from your computer
As we previously mentioned, the appearance of the Chainthorn.com site on the web browser does not necessarily mean adware infection.
However, if you noticed that Google Chrome or another browser is leading you to tech support scam, phishing, push notification sites on a regular basis, it is highly likely that adware is involved.
To remove Chainthorn.com virus from your device, you can scan it with anti-malware software or, if you are aware which program is causing troubles, uninstall via the Control Panel in Windows or moving it to Trash on Mac. After that, you can reset each of the installed browsers to make sure all elements and altered settings of the unwanted program are terminated.
If your device is not affected with adware, but you allowed notifications to be shown, you can achieve Chainthorn removal by following these steps:
Uninstall from Windows
To remove the intrusive activity of Chainthorn.com form Windows, you should do the following:
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.
Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.
Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.
Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.
Do not let government spy on you
The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.
Avoid any unwanted government tracking or spying by going totally anonymous on the internet.
You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.
Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.
Backup files for the later use, in case of the malware attack
Computer users can suffer from data losses due to cyber infections or their own faulty doings.
Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.
When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.
Questions about Chainthorn.com ads
chainthorn.com keeps sending notifications. Is it a virus?
No. Notifications from chainthorn.com come from a permission stored in the browser, not from a program installed in Windows. Someone clicked Allow on a prompt from that site, usually without realising what it meant, and the site now sends ads through the browser's notification system.
Antivirus scans often find nothing because there is nothing to find on the disk. Removing chainthorn.com from the browser's list of allowed sites stops the messages for good. A scan is still useful if you clicked a notification and downloaded or ran something from the page it opened, because those downloads can be unwanted programs.
The chainthorn.com notification said my PC is infected. Is it true?
No. Notifications from chainthorn.com are adverts written to look like system messages. A website cannot scan your files, so it has no way to know whether your PC is infected; it shows the same warning to everyone who allowed its notifications. Real Windows Security messages name Windows Security in the bottom line, not a browser and a website.
If you want to be sure, open Windows Security from the Start menu and run a quick scan there. Then remove chainthorn.com from the browser's notification settings so the fake warnings stop arriving. Do not call any number or buy anything the notification or its page suggests.
What is Chainthorn.com?
Chainthorn.com is a push-notification spam site, a kind of adware. It earns money by showing desktop notifications, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Chainthorn.com does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Why does chainthorn.com keep showing up?
There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from chainthorn.com, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.
If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if chainthorn.com never appears there, an extension is the likely cause. The plan above covers each case.
Do I have to change settings in every browser?
Only in the browsers that allowed chainthorn.com, but checking all of them takes a minute and is worth it. We saw the notifications in Chrome, Edge and Firefox. Chrome and Edge keep their notification lists under site settings, and Firefox under Privacy & Security > Permissions.
Remove chainthorn.com and any other unfamiliar site from each list, then turn off new notification requests if you do not need them. Remember that every browser profile has its own list, so a second profile can keep the messages coming after you clean the first.
Are the pop-ups I see really from Chainthorn.com?
Compare them with the details in the table above. Chainthorn.com produces desktop notifications, and the clearest sign of it is notifications from chainthorn.com. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
Can an adware pop-up infect my PC just by appearing?
No. A pop-up, a notification or a new tab is only a web page or a message. It cannot run programs on Windows by itself, provided the browser and Windows are up to date. Infection needs a step from you:
- running a downloaded file
- installing an extension
- giving a stranger remote access
That is why scam pages work so hard to make you click. Close such pages with the tab's X or by closing the browser, not with buttons inside the page, which may start a download.
My scan found nothing, but the ads continue. Why?
Because the source may not be a file a scanner looks for. Browser notifications are a permission stored in the browser, and many adware extensions are not flagged because they come from an official store.
Some ad-supported programs are only reported if you enable detection of potentially unwanted apps. So a clean scan does not mean the job is done. Check each browser's notification permissions and extension list by hand, and turn on Potentially unwanted app blocking in Windows Security before scanning again.
I let a "support technician" from an ad connect to my PC. What should I do?
Act quickly but calmly. Disconnect the PC from the internet first, so the connection ends. Uninstall the remote access tool they asked you to install and check Installed apps for anything else added during the call.
Run a Microsoft Defender full scan and offline scan. From another device, change your e-mail and banking passwords and sign out of all sessions.
If you paid by card, bank transfer or gift card, contact your bank or the card issuer immediately, and report the scam to the police. Do not answer if they call back.
Will Fortect remove Chainthorn.com?
No program removes Chainthorn.com itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Reddit: Chrome chainthorn.com policy - malware? (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)
- Microsoft Learn: How Microsoft names malware (read October 6, 2026)