Defenderlab.xyz ads: what it is and how to remove it
Defenderlab.xyz is a bogus site that displays a fake security alert. It was created by crooks to generate revenue.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
If notifications from defenderlab.xyz led you to download something, a free scan can check the PC for anything that came with it.
Do it yourself · free Remove Defenderlab.xyz ads yourself 2 steps, about 6 minutes, no software needed.
Defenderlab.xyz ads: summary
| Distribution | Shady websites; deceptive ads; bundled software |
|---|---|
| NAME | Defenderlab.xyz |
| TYPE | Push notification spam; adware |
| SYMPTOMS | A page appears seemingly out of nowhere warning users about virus infections; users may start seeing pop-ups that look like security alerts; |
| DANGERS | People may be tricked into providing personal information, downloading potentially unwanted programs, or even malware |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 11 more facts
| Damage | Not recorded in the old report |
|---|---|
| Name | Defenderlab.xyz |
| Type | Push-notification spam site |
| Symptoms | Notification spam from a website |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | defenderlab.xyz |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 17 June 2022 |
| Facts checked | 7 October 2026 |
Is Defenderlab.xyz ads dangerous?
From our report of Jun 2022 · not reviewed since
Defenderlab.xyz looks like a security alert but it was created by crooks to generate revenue
Defenderlab.xyz is a bogus site that displays a fake security alert.
It was created by crooks to generate revenue. The site tries to convince people that their PC is infected with multiple viruses and that they need to take immediate action.
The bogus page can also start causing annoying push notifications that look like security alerts.
However, crooks may use rogue advertising networks that place ads leading to dangerous websites. As a result, people can end up on scam pages that try to lure out personal information, trick them into downloading PUPs (potentially unwanted programs), and even malware.
From our report of Jun 2022 · not reviewed since
Disable fake alerts
To stop annoying virus alerts from Defenderlab.xyz, you have to block the site permissions that allow it to show you push notifications.
You can do that by following our step-by-step guide:
Google Chrome (desktop):
Google Chrome (Android):
MS Edge (Chromium):
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Locate the unwanted URL and toggle the button to the left (Off setting).
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click Settings button next to it.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Click on Safari > Preferences...
- Go to Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.
- Toggle the switch to the left to turn notifications off on Microsoft Edge.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
From our report of Jun 2022 · not reviewed since
Clear the browser from cookies
Cookies are small text files that can track your browsing activity and store information, like your IP address, geolocation, websites you visit, links you click on, and things you purchase.
This data is normally used to personalize the user experience but crooks use it to make a profit. They can be sold to advertising networks and other third parties.
They can even be hijacked, and used for malicious purposes, that is why security experts recommend clearing them regularly. This process can be made easy with a maintenance tool like . Besides, this powerful software can fix various system errors, corrupted files, and registry issues which is especially helpful after a virus infection.
From our report of Jun 2022 · not reviewed since
Scan your machine with anti-malware tools
It is mostly spread on freeware distribution sites.
They include additional programs in the installers and do not disclose it clearly on their pages.
It should detect most suspicious apps and remove them successfully. Of course, you can also remove a PUP manually, but it is unknown which particular app could be causing annoying behavior, as crooks disguise them as "handy" tools. Manual uninstallation can also leave some traces of the program behind which could result in the renewal of the infection.
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
- Pick the unwanted application by clicking on it once.
- At the top, click Uninstall/Change.
- In the confirmation prompt, pick Yes.
- Click OK once the removal process is finished.
- From the menu bar, select Go > Applications.
- In the Applications folder, look for all related entries.
- Click on the app and drag it to Trash (or right-click and pick Move to Trash)
- Select Go > Go to Folder.
- Enter /Library/Application Support and click Go or press Enter.
- In the Application Support folder, look for any dubious entries and then delete them.
- Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
From our report of Jun 2022 · not reviewed since
More from our earlier report on Defenderlab.xyz
- It is designed to look like a message from Norton.
- Obviously, Norton Security has nothing to do with this fraudulent campaign.
- The main goal is to redirect users to the official Norton website so crooks could make money through the affiliate program from every license purchase.
- They may also redirect to the Norton site.
- Disable push notifications in the browser settings; run a system scan with professional security tools
How Defenderlab.xyz ads got into your browser
From our report of Jun 2022 · not reviewed since
Usually, users do not stumble upon scam sites in their search results.
Normally, they hide in other shady sites behind deceptive ads, sneaky redirects, fake "Download" and "Play" buttons. For example, illegal streaming sites are unregulated, so they are breeding grounds for all fake websites, like human verification scams.
Do not click on random links and ads even if they seem to be promoting legitimate products and services. It is always best to go to the source directly. Use legitimate streaming platforms, like Netflix or Hulu. They require only a small monthly subscription fee.
However, such pages can also appear without any user input. Adware is a type of PUP that can generate commercial content on the machine. Most users, do not notice such infections until it has already started performing unwanted tasks. So, it is very possible that the deceptive page opened automatically.
Check your browser and PC
- Address:
defenderlab.xyz
How to remove Defenderlab.xyz ads
How to stop Defenderlab.xyz notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove defenderlab.xyz from Chrome's notification list
Chrome keeps a list of every site you once allowed to send notifications, and
defenderlab.xyzis on it. Pastechrome://settings/content/notificationsinto the address bar, find defenderlab.xyz under Allowed to send notifications, open the three-dot menu next to it and pick Remove.Then click Add next to Not allowed to send notifications and type defenderlab.xyz, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove defenderlab.xyz from Edge's notification list
Open Settings and more (the three dots) > Settings > Privacy, search, and services > Site permissions > All permissions > Notifications. Remove
defenderlab.xyzfrom the Allowed list, then click Add site next to Not allowed to send notifications and enter it there.Edge is built into both Windows 11 and Windows 10, so check it even if you normally use another browser. If the notifications came with the Edge logo, this is the browser that holds the permission.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove defenderlab.xyz from Firefox's notification permissions
Open the menu (three lines) > Settings and click Permissions and data in the left list, then Notifications. Select
defenderlab.xyz, click Remove Website and confirm with Save Changes.In versions older than Firefox 152 the same list sits under Privacy & Security, behind a Settings button next to Notifications. Firefox shows these notifications only while it is running, on Windows 11 and Windows 10 alike.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Do not let government spy on you
The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.
Avoid any unwanted government tracking or spying by going totally anonymous on the internet.
You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.
Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.
Backup files for the later use, in case of the malware attack
Computer users can suffer from data losses due to cyber infections or their own faulty doings.
Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.
When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.
Questions about Defenderlab.xyz ads
How do I stop notifications from defenderlab.xyz?
Remove its permission in the browser. The bottom line of each notification names the browser, so open that browser's notification settings and look under Allowed. Remove defenderlab.xyz and any other site you do not recognise.
In Chrome and Edge this is under the site settings for notifications; in Firefox it is under Settings, Permissions and data, Notifications. Do this in every browser profile, because each one keeps its own list.
Restart the browser and wait a few minutes. If a message still arrives, read its bottom line again: the sending address can differ from the site you remember, and that is the entry still left in the list.
The defenderlab.xyz notification said my PC is infected. Is it true?
No. Notifications from defenderlab.xyz are adverts written to look like system messages. A website cannot scan your files, so it has no way to know whether your PC is infected; it shows the same warning to everyone who allowed its notifications. Real Windows Security messages name Windows Security in the bottom line, not a browser and a website.
If you want to be sure, open Windows Security from the Start menu and run a quick scan there. Then remove defenderlab.xyz from the browser's notification settings so the fake warnings stop arriving. Do not call any number or buy anything the notification or its page suggests.
Why does Defenderlab.xyz show me ads?
Because that is its whole purpose. Defenderlab.xyz is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.
They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.
Is defenderlab.xyz safe to visit?
No. The site defenderlab.xyz exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.
Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.
Which browser is sending the defenderlab.xyz notifications?
Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from defenderlab.xyz came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.
If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.
How do I know the ads come from Defenderlab.xyz?
Look for notifications from defenderlab.xyz. That is the trace Defenderlab.xyz leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.
A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.
Will Focus or Do not disturb stop the notifications?
Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.
Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.
I clicked on one of the ads. Am I infected?
Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.
You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.
Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.
An ad showed a phone number and I called it. What now?
The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.
If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.
Will Fortect remove Defenderlab.xyz?
No program removes Defenderlab.xyz itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Makeuseof: Why Should You Avoid Illegal Streaming Sites? (read October 7, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 7, 2026)
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)
- Microsoft Learn: How Microsoft names malware (read October 7, 2026)