Defenderweb.xyz ads: what it is and how to remove it
Defenderweb.xyz is a fake website that was created by cybercriminals to show misleading content. Its main operation principles include showing fake virus infection alerts, redirecting to other malicious websites, and asking users to enable notifications, which would later result in more phishing content being shown on users' desktops.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A quick scan confirms that the defenderweb.xyz notifications did not lead to anything being installed.
Do it yourself · free Remove Defenderweb.xyz ads yourself 2 steps, about 6 minutes, no software needed.
Defenderweb.xyz ads: summary
| Name | Defenderweb.xyz |
|---|---|
| Type | Scam, ads, redirect |
| Infiltration | Compromised websites, pop-up ads, potentially unwanted applications |
| Scam content | Shows a message which claims that the antivirus subscription has expired and needs to be updated; it also asks to enable notifications |
| Dangers | Those who have malicious software installed on their systems are more likely to encounter dangerous websites, resulting in financial losses, malware infections |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 10 more facts
| Distribution | Not recorded in the old report |
|---|---|
| Damage | Not recorded in the old report |
| Symptoms | Notification spam from a website |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | defenderweb.xyz |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 27 May 2022 |
| Facts checked | 6 October 2026 |
What the Defenderweb.xyz ads ads look like
Your PC is infected with 5 viruses!
Is Defenderweb.xyz ads dangerous?
From our report of May 2022 · not reviewed since
Defenderweb.xyz imitates a virus scan and promotes malicious ads
Defenderweb.xyz is a fake website that was created by cybercriminals to show misleading content.
Its main operation principles include showing fake virus infection alerts, redirecting to other malicious websites, and asking users to enable notifications, which would later result in more phishing content being shown on users' desktops.
Defenderweb.xyz is one of the thousands of websites that shows fake virus scans in order to frighten users and make them believe that their computers are infected and their personal safety and computer security are in danger. The goal of scammers is to make people download software that they can benefit financially from.
Everything shown on this website is fake, and you should not interact with any links or download software.
From our report of May 2022 · not reviewed since
How the scam works
Most users encounter suspicious and misleading websites by accident after clicking a fake link.
However, this is much more likely when visiting websites of dubious nature - torrents, YouTube video converters, software cracks, and similar. These sites commonly host malicious scripts that would immediately reroute users to other places automatically and also host booby-trapped links that would do the same.
This behavior results in users entering the Defenderweb.xyz unexpectedly, which helps the scam be successful. During this time, several pop-ups are shown, which imitate detection triggers - just like many other antivirus solutions do.
In a short while, users are presented with the following statement:
Some users might be scared of this message, as it can make them believe that their machines are in danger. While the redirect might lead you to the legitimate website of the security vendor, it might be fake in some cases. Besides, by downloading security software, you would be supporting scammers, which would make them more likely to spread more scam websites.
From our report of May 2022 · not reviewed since
Check your system for infections
The easiest way to check the computer for malware is by scanning it with or antivirus software - all the threats would be eliminated automatically.
However, you can check for potentially unwanted programs yourself if you want to do that manually instead. Since most adware nowadays takes the shape of a browser extension, start by eliminating all the suspicious extensions as follows:
After removing potentially unwanted extensions, make sure you remove cookies and other web data from your browsers. Otherwise, data tracking by adware might continue, and your privacy might remain at risk. The easiest way to do so is by performing a scan with the maintenance tool. It could also fix any damage done to the system, which could otherwise cause system crashes, registry errors, and other issues.
Your next step is to make sure that there is no adware installed on the system level, which would usually be visible on the installed application list.
While moving apps into Trash is how you delete most normal applications, adware tends to create additional files for persistence. Thus, you should look for .plist and other files that could be related to the virus. If you are not sure, skip this step entirely.
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted plugin and click Remove.
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
- Click Safari > Preferences...
- In the new window, pick Extensions.
- Select the unwanted extension and select Uninstall.
- Enter Control Panel into the Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- From the menu bar, select Go > Applications.
- In the Applications folder, look for all related entries.
- Click on the app and drag it to Trash (or right-click and pick Move to Trash)
- Select Go > Go to Folder.
- Enter /Library/Application Support and click Go or press Enter.
- In the Application Support folder, look for any dubious entries and then delete them.
- Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
From our report of May 2022 · not reviewed since
More from our earlier report on Defenderweb.xyz
- While the message is presented to look like a scan from McAfee security software, the anti-malware vendor has nothing to do with the Defenderweb.xyz scam.
- Third parties can employ cookies to continue tracking your online activities, so we recommended clearing browser caches and other leftover PUP files with
- What people are shown is a system scan that looks like that done by a reputable security software McAfee.
- ACTION REQUIRED Your McAfee Subscription Has Expired!
- Renew now to keep your PC protected.
- If your PC is unprotected, it is at risk for viruses and other malware.
Check your browser and PC
- Address:
defenderweb.xyz
How to remove Defenderweb.xyz ads
How to stop Defenderweb.xyz notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove defenderweb.xyz from Chrome's notification list
Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste
chrome://settings/content/notificationsinto the address bar.Under Allowed to send notifications, open the menu next to
defenderweb.xyzand choose Remove or Block, and do the same for any other address you do not recognise.Next to Not allowed to send notifications, click Add and enter defenderweb.xyz, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove defenderweb.xyz from Edge's notification list
Edge stores its own permission list, separate from Chrome's, and it is often the browser behind these pop-ups on Windows 11 and Windows 10.
Go to Settings > Privacy, search, and services > Site permissions > All permissions > Notifications, or paste
edge://settings/content/notifications. Removedefenderweb.xyzfrom Allowed, then add it under Not allowed to send notifications. Notifications that show the Edge logo come from this list.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove defenderweb.xyz from Firefox's notification permissions
In Firefox the permission sits in Settings > Permissions and data > Notifications (in older versions Privacy & Security > Notifications > Settings). Select
defenderweb.xyzin the list, click Remove Website, and confirm with Save Changes.Firefox only shows these notifications while it is open, so if they stopped after closing Firefox, this is the browser to clean. The steps are the same on Windows 11 and Windows 10.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
More removal instructions
For programs installed on the PC and older browsers. Open the one you need.
Get rid of Defenderweb.xyz push notifications
As mentioned, besides showing the scam message that attempts to make people believe their systems are infected, the website asks to enable push notifications.
These pop-ups might show more fake virus infection messages and other misleading content.
MS Edge (Chromium)
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and choose Block. This should remove unwanted notifications from Google Chrome.
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click the Settings button.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
- Click on Safari > Preferences...
- Go to the Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
Questions about Defenderweb.xyz ads
How do I stop notifications from defenderweb.xyz?
Remove its permission in the browser. The bottom line of each notification names the browser, so open that browser's notification settings and look under Allowed. Remove defenderweb.xyz and any other site you do not recognise.
In Chrome and Edge this is under the site settings for notifications; in Firefox it is under Settings, Permissions and data, Notifications. Do this in every browser profile, because each one keeps its own list.
Restart the browser and wait a few minutes. If a message still arrives, read its bottom line again: the sending address can differ from the site you remember, and that is the entry still left in the list.
The defenderweb.xyz notification said my PC is infected. Is it true?
No. Notifications from defenderweb.xyz are adverts written to look like system messages. A website cannot scan your files, so it has no way to know whether your PC is infected; it shows the same warning to everyone who allowed its notifications. Real Windows Security messages name Windows Security in the bottom line, not a browser and a website.
If you want to be sure, open Windows Security from the Start menu and run a quick scan there. Then remove defenderweb.xyz from the browser's notification settings so the fake warnings stop arriving. Do not call any number or buy anything the notification or its page suggests.
What is Defenderweb.xyz?
Defenderweb.xyz is a push-notification spam site, a kind of adware. It earns money by showing desktop notifications, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Defenderweb.xyz does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Why does defenderweb.xyz keep showing up?
There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from defenderweb.xyz, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.
If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if defenderweb.xyz never appears there, an extension is the likely cause. The plan above covers each case.
Do I have to change settings in every browser?
Only in the browsers that allowed defenderweb.xyz, but checking all of them takes a minute and is worth it. We saw the notifications in Chrome, Edge and Firefox. Chrome and Edge keep their notification lists under site settings, and Firefox under Privacy & Security > Permissions.
Remove defenderweb.xyz and any other unfamiliar site from each list, then turn off new notification requests if you do not need them. Remember that every browser profile has its own list, so a second profile can keep the messages coming after you clean the first.
Are the pop-ups I see really from Defenderweb.xyz?
Compare them with the details in the table above. Defenderweb.xyz produces desktop notifications, and the clearest sign of it is notifications from defenderweb.xyz. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
Can I turn off the pop-ups in Windows settings instead?
You can hide them, but that is not the fix. In Windows 11, Settings > System > Notifications lets you switch off notifications for a whole browser, which silences the spam together with every useful notification from that browser.
The site keeps its permission and can still send messages when you switch them back on. It is better to remove the specific site in the browser's own notification settings and block new requests. That stops the messages at the source and leaves the rest of your notifications working.
Can an adware pop-up infect my PC just by appearing?
No. A pop-up, a notification or a new tab is only a web page or a message. It cannot run programs on Windows by itself, provided the browser and Windows are up to date. Infection needs a step from you:
- running a downloaded file
- installing an extension
- giving a stranger remote access
That is why scam pages work so hard to make you click. Close such pages with the tab's X or by closing the browser, not with buttons inside the page, which may start a download.
Is it safe to click Block or Allow on a notification prompt?
Clicking Block is safe; it only tells the browser not to show notifications from that site. Clicking Allow is not dangerous to your files either, but it gives the site a channel to your desktop that spam sites abuse at once.
The prompt itself is part of the browser, so you can trust its buttons. What you cannot trust is the text on the page around it. If a page explains why you must click Allow, choose Block or close the tab.
Will Fortect remove Defenderweb.xyz?
No program removes Defenderweb.xyz itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Wikipedia: Adware (read October 6, 2026)
- NTT: Cookies and Web Beacons (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)