Mydesktopdefender.com scam shows fake antivirus notification prompts

Mydesktopdefender.com is one of the thousands of websites that use fraud in order to make users do something they otherwise wouldn't. In this case, it is subscribing to notifications – pop-up type messages that appear on top of all the other apps, regardless of which web page is being visited at the time. It also applies to all browsers – Google Chrome, Mozilla Firefox, MS Edge, or Safari can all be affected by this issue.
In most cases, users do not visit sites like this one on purpose but instead get redirected from somewhere else. The activity might also sometimes be a direct result of the adware[1] infection, so it is important to check the system thoroughly. The best thing to do is to ignore these redirects and leave the browser tab immediately. However, users are often curious or are unaware of many scam websites that seek to trick them.
Upon entering the website, people might see some familiar names. To be precise, they are likely to recognize the name of Norton – a security company that specializes in making anti-malware software. The fake message claims that users' computers have been infected with 5 viruses and that they should allegedly update their security software, regardless if they are using Norton or not. Do not be tricked by this pop-up, as it is fake and can result in the installation of potentially unwanted programs or malware.
There are a few components to the Mydesktopdefender.com scam. You should ensure that none of them remain on your system. Below you will find the information needed on how to deal with the intrusive pop-ups from the site as well as how to avoid being scammed in the future.
| Name | Mydesktopdefender.com |
|---|---|
| Type | Push notifications, pop-ups, ads |
| Distribution | As soon as the “Allow” button is pressed within the notification prompt |
| Symptoms | Intrusive pop-ups from the site will be shown directly on users' desktops |
| Dangers | Clicking on links that are embedded within the notification prompt, exploring the sites these links bring to, or downloading files can be particularly dangerous – users can get infected with malware, suffer from financial losses or privacy issues |
| Deletion | You can stop the unwanted notifications by accessing web browser settings, as explained in the instructions below. If you suspect adware infection, you should use security software to eliminate it quickly |
| Further steps | Cleaning web browsers is just as important when dealing with potentially unwanted programs, so do so by following the instructions below or use FortectIntego as an automatic fix |
The fake alerts and how to recognize them
Online fraud has been around for as long as the internet – cybercriminals were quick to realize that it can be used to scam users to benefit financially. This is precisely the reason why we see the rise of such devastating cyber threats as ransomware[2] or data-stealing malware.
While these computer infections can be particularly dangerous, there is a lesser form of fraud that can be used by crooks – fake alerts. There are plenty of fraudulent messages that are populated on various malicious websites in order to make users perform actions they otherwise wouldn't.
In this case, visitors are being convinced that there are infections already present on the device, and they need to be removed thanks to Norton antivirus. Here is the full message you might encounter:
Norton Security
Your PC is infected with 5 viruses!
ACTION REQUIRED!
Your Norton Subscription Has Expired!
Renew now to keep your pc protected.
If your PC is unprotected, it is at risk for viruses and other malware.
According to the note, the antivirus program's subscription has expired, and they need to renew it in order to allegedly remove the found viruses. In reality, all these statements are false. In most cases, even users who do not use Norton might receive this notification, which is the first red flag.
Even if you do use this security software, do not believe the notifications you encounter on random websites after being redirected[3] from somewhere else. Crooks rely on users' inexperience and try to frighten them about things that are not actually true.

This is not the first time crooks are trying to use social engineering tricks in order to frighten users. We have previously discussed scams like Your system is infected with (3) viruses, Critical Error, or Pornographic virus alert from Microsoft. Crooks use the familiarity of the tech giants in order to make the fake messages more believable.
Unfortunately, some less IT-savvy individuals might not be familiar with all the technical terms that the scam uses and get tricked into doing what was asked for. In the case of the Mydesktopdefender.com scam (note that this message can manifest on other websites, as crooks often use templates that are simply populated across various malicious sites around the web), the “system scan” is fake. It is a mere image of fake scan results.
Thus, you should never download anything suggested on such websites, as the offered software is likely to be malicious. If you need help protecting yourself from malicious sites like this, we strongly recommend you employ security software with real-time protection feature – SpyHunterCombo Cleaner or MalwarebytesMalwarebytes can be helpful. Also, you should also pay close attention to the URL address the message is coming from – deception can be easily spotted from there.
Stop Mydesktopdefender.com pop-ups
As we already mentioned, the Mydesktopdefender.com scam uses two components – the push notification prompt and the fraudulent notification, which encourages you to download insecure software. It goes without saying that you should not install anything offered, as it might start stealing your passwords or damage your personal computer files.
Nonetheless, if you have agreed for the notifications to be shown, you might receive intrusive pop-ups on your screen at regular intervals. What makes it worse is that these notifications would show up on top of all the other apps, making you accidentally click on embedded links. Besides, the pop-ups are extremely intrusive and can come at any time, disrupting normal PC activities.
In order to stop the ads, you should access the site settings of your browser. Below you will find instructions on how to do that on all modern web browsers.
Google Chrome (desktop):
- Open Google Chrome browser and go to Menu > Settings.
- Scroll down and click on Advanced.
- Locate the Privacy and security section and pick Site Settings > Notifications.

- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

Google Chrome (Android):
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Scroll down to the Sites section.
- Locate the unwanted URL and toggle the button to the left (Off setting).

Mozilla Firefox:
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click the Settings button next to it.

- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.

Safari:
- Click on Safari > Preferences…
- Go to the Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.

MS Edge:
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.

- Toggle the switch to the left to turn notifications off on Microsoft Edge.

MS Edge (Chromium):
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.

Internet Explorer:
- Open Internet Explorer, and click on the Gear icon at the top-right of the window.
- Select Internet options and go to the Privacy tab.
- In the Pop-up Blocker section, click on Settings.
- Locate web address in question under Allowed sites and pick Remove.

Clean your system
As evident, the prompts from the Mydesktopdefender.com scam site are not real, so you can easily ignore them. However, completely denying the possibility that there could be a potentially unwanted program or malware installed on your device is also not a wise thing to do.
While you might encounter scam websites by just browsing the internet, another reason for browser redirects is adware. These potentially unwanted programs are usually spread in software bundle packages, which results in unintentional installation. This is one of the reasons why most people are not aware that adware is installed on their systems.
The easiest way to check for adware is to scan the device with security software. It can also check whether there are malicious programs running in the background and remove all the components automatically. Of course, if you are aware of which application could be causing redirects to suspicious sites, ads, and other issues, you can also delete it manually. Keep in mind, however, the adware might be either installed as a browser extension or a program (on the system level).
You should also take your time and clean your web browsers thoroughly. Many unwanted applications are programmed to collect user data with the help of tracking technologies such as cookies, which might remain after the PUP is eliminated. Besides, the unwanted ads and redirects might continue.
In order to delete web data and cookies, you need to access the settings section of your web browser – you can find all the details below. Alternatively, you could also employ an automatic maintenance solution FortectIntego for the job.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Was this guide helpful?
Be the first to comment