Favins.xyz ads: what it is and how to remove it
Favins.xyz is a fraudulent website created by fraudsters in order to profit from affiliate programs and pay-per-click advertising. Furthermore, the site may bombard users with annoying pop-up advertisements that may appear even when the browser is closed.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A quick scan confirms that the favins.xyz notifications did not lead to anything being installed.
Do it yourself · free Remove Favins.xyz ads yourself 2 steps, about 6 minutes, no software needed.

Favins.xyz ads: summary
| Distribution | Software bundles, shady websites, deceptive ads |
|---|---|
| NAME | Favins.xyz |
| TYPE | Push notification spam, adware |
| SYMPTOMS | The site shows a message which claims that the antivirus subscription has expired and needs to be updated; also asks to enable notifications |
| DANGERS | People can get spammed with pop-ups that say their system is infected and install PUPs or malware unknowingly |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 11 more facts
| Damage | Not recorded in the old report |
|---|---|
| Name | Favins.xyz |
| Type | Push-notification spam site |
| Symptoms | Notification spam from a website |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | favins.xyz |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 11 April 2023 |
| Facts checked | 7 October 2026 |
What the Favins.xyz ads ads look like
Your PC is infected with 5 viruses!
Is Favins.xyz ads dangerous?
From our report of Apr 2023 · not reviewed since
Favins.xyz is a fake site created by crooks to trick people into believing their system is infected
Favins.xyz is a fraudulent website created by fraudsters in order to profit from affiliate programs and pay-per-click advertising.
Furthermore, the site may bombard users with annoying pop-up advertisements that may appear even when the browser is closed.

From our report of Apr 2023 · not reviewed since
Social engineering techniques
The individuals behind Favins.xyz employ social engineering tactics to persuade individuals that their computer is genuinely infected with multiple viruses.
They inundate users with various prompts, and the message displayed typically states:
According to the message displayed on Favins.xyz, the computer is vulnerable and has been infected as a result. Websites, on the other hand, are incapable of scanning a computer's system and making such determinations. To bolster the credibility of this claim, the website launches a phony system scan for potential threats, eventually discovering several to instill fear and prompt users to act rashly.

From our report of Apr 2023 · not reviewed since
Privacy issues
Cookies, which are small text files that store information such as the websites visited, links clicked on, and online purchases made, allow websites to track users' activities.
While cookies are commonly used to personalize the user experience, malicious actors can also use them to generate revenue.
Cookies can be sold to advertising networks and other third parties, which is why security experts recommend clearing them on a regular basis. The maintenance tool is an excellent choice for automating this task. This powerful software can also address a variety of system errors, making it an invaluable tool to have on hand after a virus infection.
From our report of Apr 2023 · not reviewed since
Disable push notifications
To stop annoying virus alerts from Favins.xyz, you have to block the site permissions that allow it to show you push notifications.
You can do that by following our step-by-step guide:
Google Chrome (desktop):
Google Chrome (Android):
MS Edge (Chromium):
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Locate the unwanted URL and toggle the button to the left (Off setting).
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click Settings button next to it.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Click on Safari > Preferences...
- Go to Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.
- Toggle the switch to the left to turn notifications off on Microsoft Edge.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
From our report of Apr 2023 · not reviewed since
Freeware installations
If you have disabled push notifications but are still experiencing unwanted symptoms such as unexpected redirects and an increase in commercial content such as pop-ups and banners, you should run an adware scan on your system. Adware is a type of advertising-supported software that is commonly distributed through freeware distribution sites and includes additional programs aimed at monetizing user activity.
Many users rush through the installation process, missing the bundled software. To reduce the possibility of adware infiltrating your system, always use the "Custom" or "Advanced" installation options, read the Terms of Use and Privacy Policy carefully to understand how your data will be used, and inspect the file list while unchecking unnecessary program boxes.
From our report of Apr 2023 · not reviewed since
Scan your machine with anti-malware tools
These tools are capable of detecting and successfully removing most suspicious applications.
While manual removal is an option, it can be difficult to determine which app is causing the undesirable behavior because malicious actors frequently disguise them as "useful" tools.
Moreover, manual uninstallation may leave behind traces of the program, which could result in the re-emergence of the infection.
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
- Pick the unwanted application by clicking on it once.
- At the top, click Uninstall/Change.
- In the confirmation prompt, pick Yes.
- Click OK once the removal process is finished.
- From the menu bar, select Go > Applications.
- In the Applications folder, look for all related entries.
- Click on the app and drag it to Trash (or right-click and pick Move to Trash)
- Select Go > Go to Folder.
- Enter /Library/Application Support and click Go or press Enter.
- In the Application Support folder, look for any dubious entries and then delete them.
- Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
From our report of Apr 2023 · not reviewed since
More from our earlier report on Favins.xyz
- It deceives users into believing that their computer has been infected with numerous viruses by using the name of the reputable security brand McAfee.
- To disable the pop-ups go to your browser settings; scanning your system with anti-malware tools is recommended
- McAfee Total Protection Your PC is infected with 5 viruses!
- Please renew subscription to keep your PC protected.
- Viruses found on this PC most likely track internet activity to collect banking details and login credentials.
- Unprotected PCs are 93% more vulnerable to suffer from malware.
How Favins.xyz ads got into your browser
From our report of Apr 2023 · not reviewed since
In most cases, fraudulent web pages, such as Favins.xyz, are not prominently displayed in search results.
Instead, they are frequently hidden on other dubious and unregulated websites. It is best to only visit familiar and trustworthy websites, and to avoid clicking on random links and advertisements, even if they appear to be advertising legitimate products and services.
Check your browser and PC
- Address:
favins.xyz
How to remove Favins.xyz ads
How to stop Favins.xyz notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove favins.xyz from Chrome's notification list
Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste
chrome://settings/content/notificationsinto the address bar.Under Allowed to send notifications, open the menu next to
favins.xyzand choose Remove or Block, and do the same for any other address you do not recognise.Next to Not allowed to send notifications, click Add and enter favins.xyz, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.

Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove favins.xyz from Edge's notification list
Edge stores its own permission list, separate from Chrome's, and it is often the browser behind these pop-ups on Windows 11 and Windows 10.
Go to Settings > Privacy, search, and services > Site permissions > All permissions > Notifications, or paste
edge://settings/content/notifications. Removefavins.xyzfrom Allowed, then add it under Not allowed to send notifications. Notifications that show the Edge logo come from this list.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove favins.xyz from Firefox's notification permissions
In Firefox the permission sits in Settings > Permissions and data > Notifications (in older versions Privacy & Security > Notifications > Settings). Select
favins.xyzin the list, click Remove Website, and confirm with Save Changes.Firefox only shows these notifications while it is open, so if they stopped after closing Firefox, this is the browser to clean. The steps are the same on Windows 11 and Windows 10.

Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Protect your privacy - employ a VPN
There are several ways how to make your online time more private - you can access an incognito tab.
However, there is no secret that even in this mode, you are tracked for advertising purposes. There is a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise.
Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and VPN will let you browse the Internet without a feeling of being spied or targeted by criminals.
No backups? No problem. Use a data recovery tool
If you wonder how data loss can occur, you should not look any further for answers - human errors, malware attacks, hardware failures, power cuts, natural disasters, or even simple negligence.
In some cases, lost files are extremely important, and many straight out panic when such an unfortunate course of events happen. Due to this, you should always ensure that you prepare proper data backups on a regular basis.
If you were caught by surprise and did not have any backups to restore your files from, not everything is lost. is one of the leading file recovery solutions you can find on the market - it is likely to restore even lost emails or data located on an external device.
Questions about Favins.xyz ads
Why do I get notifications from favins.xyz when the browser is closed?
Chrome and Edge can keep a small part running in the background so that sites can deliver notifications, and Windows shows them in its notification area. That is why messages from favins.xyz keep arriving with no browser window open.
The permission to send them was granted when someone clicked Allow on a prompt from that site, often disguised as a robot check or a video player. Closing the browser does not remove it; only the notification settings do.
Remove favins.xyz from the allowed sites and the background messages stop. You can also stop the browser from running in the background in its system settings, but the permission is the real fix.
Did a notification from favins.xyz infect my computer?
A notification cannot infect a PC. It is a short text with a link that the browser displays. Clicking it opens a page, and a page cannot install anything unless you agree to a download and run the file.
So the answer depends on what you did after clicking. Looked and closed: you are fine. Downloaded but did not open: delete the file.
Opened a downloaded file: uninstall what it added and scan the PC. Typed card or login details: contact the bank and change the password. In every case, remove favins.xyz from the browser's allowed notifications so the messages stop.
What is Favins.xyz?
Favins.xyz is a push-notification spam site, a kind of adware. It earns money by showing desktop notifications, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Favins.xyz does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Why does favins.xyz keep showing up?
There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from favins.xyz, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.
If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if favins.xyz never appears there, an extension is the likely cause. The plan above covers each case.
Do I have to change settings in every browser?
Only in the browsers that allowed favins.xyz, but checking all of them takes a minute and is worth it. We saw the notifications in Chrome, Edge and Firefox. Chrome and Edge keep their notification lists under site settings, and Firefox under Privacy & Security > Permissions.
Remove favins.xyz and any other unfamiliar site from each list, then turn off new notification requests if you do not need them. Remember that every browser profile has its own list, so a second profile can keep the messages coming after you clean the first.
Are the pop-ups I see really from Favins.xyz?
Compare them with the details in the table above. Favins.xyz produces desktop notifications, and the clearest sign of it is notifications from favins.xyz. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
I let a "support technician" from an ad connect to my PC. What should I do?
Act quickly but calmly. Disconnect the PC from the internet first, so the connection ends. Uninstall the remote access tool they asked you to install and check Installed apps for anything else added during the call.
Run a Microsoft Defender full scan and offline scan. From another device, change your e-mail and banking passwords and sign out of all sessions.
If you paid by card, bank transfer or gift card, contact your bank or the card issuer immediately, and report the scam to the police. Do not answer if they call back.
Is it safe to click Block or Allow on a notification prompt?
Clicking Block is safe; it only tells the browser not to show notifications from that site. Clicking Allow is not dangerous to your files either, but it gives the site a channel to your desktop that spam sites abuse at once.
The prompt itself is part of the browser, so you can trust its buttons. What you cannot trust is the text on the page around it. If a page explains why you must click Allow, choose Block or close the tab.
Can I turn off the pop-ups in Windows settings instead?
You can hide them, but that is not the fix. In Windows 11, Settings > System > Notifications lets you switch off notifications for a whole browser, which silences the spam together with every useful notification from that browser.
The site keeps its permission and can still send messages when you switch them back on. It is better to remove the specific site in the browser's own notification settings and block new requests. That stops the messages at the source and leaves the rest of your notifications working.
Will Fortect remove Favins.xyz?
No program removes Favins.xyz itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Exabeam: Top 8 Social Engineering Techniques and How to Prevent Them [2022] (read October 7, 2026)
- Howtogeek: PUPs Explained: What is a "Potentially Unwanted Program"? (read October 7, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 7, 2026)
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)