Ketlex.live ads: what it is and how to remove it

Ketlex.live is a fraudulent website designed to generate revenue. Crooks only use their brand and name to gain trust.

Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

A quick scan confirms that the ketlex.live notifications did not lead to anything being installed.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Ketlex.live ads yourself 2 steps, about 6 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla Firefox

Screenshot of Ketlex.live: ketlex live
Ketlex.live as our 2023 report showed it.

Ketlex.live ads: summary

DistributionShady websites; deceptive ads; bundled software
NAMEKetlex.live
TYPEPush notification spam; adware
SYMPTOMSA page appears seemingly out of nowhere warning users about virus infections; users may start seeing pop-ups that look like security alerts;
DANGERSPeople may be tricked into providing personal information, downloading potentially unwanted programs, or even malware
Detection namesNo Microsoft detection name is known
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 11 more facts
DamageNot recorded in the old report
NameKetlex.live
TypePush-notification spam site
SymptomsNotification spam from a website
Evidence4 write-ups by security sites; details still limited
Domainsketlex.live
Ads shown asDesktop notifications
BrowsersChrome, Edge and Firefox
Installed on the PCNothing; a browser notification permission only
First seen13 March 2023
Facts checked7 October 2026

Is Ketlex.live ads dangerous?

From our report of Mar 2023 · not reviewed since

Ketlex.live is a bogus website that looks like a McAfee security alert created by crooks

Ketlex.live is a fraudulent website designed to generate revenue.

Crooks only use their brand and name to gain trust. The page, however, may result in push notification spam. People have reported seeing pop-ups that say their system is infected after the encounter.

Unfortunately, fraudsters may also use rogue advertising networks to place advertisements that direct users to dangerous websites. Users may be directed to fraudulent websites in an attempt to trick them into providing personal information, downloading PUPs (potentially unwanted programs), or even malware.

Screenshot of Ketlex.live: ketlex live
Ketlex.live in our 2023 report.

From our report of Mar 2023 · not reviewed since

Adware infections

Another reason you may be seeing the deceptive page is that you have adware.

Advertising-supported software, such as pop-ups, banners, and redirects, can result in an increase in commercial content. It runs in the background, unnoticed by the users.

It is usually spread via freeware distribution platforms. They include bundled software in the installers but do not clearly disclose it.

  • Always choose the "Custom" or "Advanced" installation methods
  • Read the Privacy Policy and Terms of Use
  • Check the file list and untick the boxes next to any unrelated applications

From our report of Mar 2023 · not reviewed since

How to disable fake security alerts?

To stop annoying virus alerts from Ketlex.live, you have to block the site permissions that allow it to show you push notifications.

You can do that by following our step-by-step guide:

Google Chrome (desktop):

Google Chrome (Android):

MS Edge (Chromium):

  • Open Google Chrome browser and go to Menu > Settings.
  • Locate the Privacy and security section and pick Site Settings > Notifications.
  • Look at the Allow section and look for a suspicious URL.
  • Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
  • Open Google Chrome and tap on Settings (three vertical dots).
  • Select Notifications.
  • Locate the unwanted URL and toggle the button to the left (Off setting).
  • Open Mozilla Firefox and go to Menu > Options.
  • Click on Privacy & Security section.
  • Under Permissions, you should be able to see Notifications. Click Settings button next to it.
  • In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
  • Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
  • Click on Safari > Preferences...
  • Go to Websites tab and, under General, select Notifications.
  • Select the web address in question, click the drop-down menu and select Deny.
  • Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
  • Select Settings and then go to Advanced.
  • Under Website permissions, pick Manage permissions and select the URL in question.
  • Toggle the switch to the left to turn notifications off on Microsoft Edge.
  • Open Microsoft Edge, and go to Settings.
  • Select Site permissions.
  • Go to Notifications on the right.
  • Under Allow, you will find the unwanted entry.
  • Click on More actions and select Block.

From our report of Mar 2023 · not reviewed since

Clear the browser from cookies

Cookies are small text files that can track your browsing activity and store information such as your IP address, geolocation, websites visited, links clicked on, and items purchased.

This information is normally used to personalize the user experience, but criminals use it to make money. They are marketable to ad networks and other third parties.

They can even be hijacked and used for malicious purposes, which is why security experts advise that they be cleared on a regular basis. A maintenance tool like can make this process much easier. Furthermore, this powerful software can repair a variety of system errors, corrupted files, and registry issues, which is especially useful following a virus infection.

From our report of Mar 2023 · not reviewed since

Scan your machine with anti-malware tools

If you disabled push notifications but still experience unwanted symptoms such as unexpected redirects and an increase in commercial content such as pop-ups and banners, you should run an adware scan on your system. Most suspicious apps should be detected and removed successfully.

Of course, you can manually remove a PUP, but it is unknown which specific app is causing annoying behavior because crooks disguise them as "useful" tools. Manual uninstallation may also leave some traces of the program behind, which may result in the infection reappearing.

To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  • Enter Control Panel into Windows search box and hit Enter or click on the search result.
  • Under Programs, select Uninstall a program.
  • From the list, find the entry of the suspicious program.
  • Right-click on the application and select Uninstall.
  • If User Account Control shows up, click Yes.
  • Wait till uninstallation process is complete and click OK.
  • Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
  • In Control Panel, select Programs > Uninstall a program.
  • Pick the unwanted application by clicking on it once.
  • At the top, click Uninstall/Change.
  • In the confirmation prompt, pick Yes.
  • Click OK once the removal process is finished.
  • From the menu bar, select Go > Applications.
  • In the Applications folder, look for all related entries.
  • Click on the app and drag it to Trash (or right-click and pick Move to Trash)
  • Select Go > Go to Folder.
  • Enter /Library/Application Support and click Go or press Enter.
  • In the Application Support folder, look for any dubious entries and then delete them.
  • Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.

From our report of Mar 2023 · not reviewed since

More from our earlier report on Ketlex.live

  • It is designed to look like a McAfee security alert.
  • Users are informed that their McAfee subscription has expired and that their computer has been infected with multiple viruses.
  • McAfee, unsurprisingly, has nothing to do with this fraudulent campaign.
  • The site's main goal is to direct users to the official McAfee website and earn money through the affiliate program.
  • Disable push notifications in the browser settings; run a system scan with professional security tools

How Ketlex.live ads got into your browser

From our report of Mar 2023 · not reviewed since

Pages like Ketlex.live are rarely found in search results.

Users must usually browse through shady, unregulated sites in order to find them. Illegal streaming websites, for example, are riddled with deceptive ads and sneaky redirects. They can also show bogus "Download" and "Play" buttons, which open new tabs.

That is why it is critical to only visit websites that you are familiar with and trust. Do not click on random links or advertisements, even if they appear to promote legitimate products or services. Use legitimate streaming platforms, such as Netflix or Hulu, which charge a small monthly subscription fee.

Ketlex.live: ketlex live ads
Ketlex.live in our 2023 report.

Check your browser and PC

  • Address: ketlex.live

How to remove Ketlex.live ads

How to stop Ketlex.live notifications

Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.

Nothing has to be uninstalled for the notifications themselves.

Which browser shows the ads?

  1. Step 1: Remove ketlex.live from Chrome's notification list

    Chrome keeps a list of every site you once allowed to send notifications, and ketlex.live is on it. Paste chrome://settings/content/notifications into the address bar, find ketlex.live under Allowed to send notifications, open the three-dot menu next to it and pick Remove.

    Then click Add next to Not allowed to send notifications and type ketlex.live, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Then, whichever browser you use

  1. Step 2: Scan the PC if you downloaded anything from the ads

    If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.

    In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

Stream videos without limitations, no matter where you are

There are multiple parties that could find out almost anything about you by checking your online activity.

While this is highly unlikely, advertisers and tech companies are constantly tracking you online. The first step to privacy should be a secure browser that focuses on tracker reduction to a minimum.

Even if you employ a secure browser, you will not be able to access websites that are restricted due to local government laws or other reasons. In other words, you may not be able to stream Disney+ or US-based Netflix in some countries. To bypass these restrictions, you can employ a powerful VPN, which provides dedicated servers for torrenting and streaming, not slowing you down in the process.

Data backups are important - recover your lost files

Ransomware is one of the biggest threats to personal data.

Once it is executed on a machine, it launches a sophisticated encryption algorithm that locks all your files, although it does not destroy them. The most common misconception is that anti-malware software can return files to their previous states. This is not true, however, and data remains locked after the malicious payload is deleted.

While regular data backups are the only secure method to recover your files after a ransomware attack, tools such as can also be effective and restore at least some of your lost data.

Questions about Ketlex.live ads

Why do I get notifications from ketlex.live when the browser is closed?

Chrome and Edge can keep a small part running in the background so that sites can deliver notifications, and Windows shows them in its notification area. That is why messages from ketlex.live keep arriving with no browser window open.

The permission to send them was granted when someone clicked Allow on a prompt from that site, often disguised as a robot check or a video player. Closing the browser does not remove it; only the notification settings do.

Remove ketlex.live from the allowed sites and the background messages stop. You can also stop the browser from running in the background in its system settings, but the permission is the real fix.

Did a notification from ketlex.live infect my computer?

A notification cannot infect a PC. It is a short text with a link that the browser displays. Clicking it opens a page, and a page cannot install anything unless you agree to a download and run the file.

So the answer depends on what you did after clicking. Looked and closed: you are fine. Downloaded but did not open: delete the file.

Opened a downloaded file: uninstall what it added and scan the PC. Typed card or login details: contact the bank and change the password. In every case, remove ketlex.live from the browser's allowed notifications so the messages stop.

Why does Ketlex.live show me ads?

Because that is its whole purpose. Ketlex.live is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.

They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.

Is ketlex.live safe to visit?

No. The site ketlex.live exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.

Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.

Which browser is sending the ketlex.live notifications?

Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from ketlex.live came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.

If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.

How do I know the ads come from Ketlex.live?

Look for notifications from ketlex.live. That is the trace Ketlex.live leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.

A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.

Why didn't my antivirus catch Ketlex.live?

Many security products do not block adware or notification sites by default, because users often agreed to them, even through a misleading prompt. Notification spam installs nothing at all, so there is no file to detect.

In Windows 11 you can make Microsoft Defender block potentially unwanted apps: open Windows Security > App & browser control > Reputation-based protection settings and turn on Potentially unwanted app blocking. If notifications caused the pop-ups, no scanner will report them; the fix is in the browser's site settings.

I clicked on one of the ads. Am I infected?

Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.

You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.

Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.

Will Focus or Do not disturb stop the notifications?

Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.

Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.

Will Fortect remove Ketlex.live?

No program removes Ketlex.live itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.

What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.

If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.

Sources

  1. Makeuseof: Why Should You Avoid Illegal Streaming Sites? (read October 7, 2026)
  2. Google Chrome Help: Use notifications to get alerts (no longer online) (read October 7, 2026)
  3. FTC: How to recognize, remove and avoid malware (read October 7, 2026)
  4. Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)
  5. Microsoft Learn: How Microsoft names malware (read October 7, 2026)

More removal guides

Remove Immediate Action Required

Immediate Action Required is a fake notification that might pop-up out of nowhere and prompt users to download useless bogus software Immediate Action Required is a scam that users mightAdwareMedium riskUgnius Kiguolis ·

Remove ReceiverHelper Mac virus

ReceiverHelper virus is a high threat to your personal safety and Mac security ReceiverHelper is a harmful application targeting Mac devices, classified under the Adload malware family. It is notoriousAdwareMedium riskJake Doevan ·

Remove Casalemedia

Casalemedia is a legal advertising service but is sometimes abused by crooks to gain personal income Casalemedia is a legitimate advertising service that provides assistance in monetizing on online contentAdwareMedium riskJake Doevan ·

Remove D1ue3yi0hkdsdl.cloudfront.net ads

D1ue3yi0hkdsdl.cloudfront.net ads is the content related to scam campaigns and fake errors or warnings D1ue3yi0hkdsdl.cloudfront.net is the program that causes notifications and advertisements that may appear unexpectedly, preventing you fromAdwareMedium riskJulie Splinters ·

Questions and experiences: Ketlex.live ads

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,442 members already hereReading, writing, commenting and voting. 0 verified · 167 joined this year