NSBlock ads: what it is and how to remove it
NSBlock virus is a term that the computer security experts use to refer to a dubious computer security software designed and distributed by a German company called Domport GmbH & Co. This product is definitely not one worth trusting.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A quick scan confirms that the nsblock.net notifications did not lead to anything being installed.
Do it yourself · free Remove NSBlock ads yourself 2 steps, about 6 minutes, no software needed.

NSBlock ads: summary
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Name | NSBlock ads |
| Type | Push-notification spam site |
| Symptoms | Notification spam from a website |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 7 more facts
| Evidence | 6 write-ups by security sites; details still limited |
|---|---|
| Domains | nsblock.net |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 27 March 2017 |
| Facts checked | 6 October 2026 |
Is NSBlock ads dangerous?
From our report of Mar 2017 · not reviewed since
How did this extension find its way on my browser?
Adware developers are always after the users who are less experienced in computing and can be easily coaxed into installing NSBlock or any other advertising virus on their computers.
The best results are typically achieved when malware developers put a deceptive marketing technique called bundling into action. This method allows tying two or more programs together and spreading them in a single software package. The problem is that less experienced users take such software packages for granted and install them on their computers without investigating them closely.
This way, NSBlock can slip into the system undetected. Advanced settings can be used to prevent such installs. You should opt for these settings before you begin the installation and look for undesirable components in the proceeding steps. Opt out the selected options manually by unticking the pre-marked check boxes next to them.
How NSBlock ads got into your browser
From our report of Mar 2017 · not reviewed since
NSBlock virus is a term that the computer security experts use to refer to a dubious computer security software designed and distributed by a German company called Domport GmbH & Co.
This product is definitely not one worth trusting. Its official download site has been taken down, and the program now gets installed along with other freeware or shareware software . At the time NSBlock.net domain existed, the creators of this software have introduced this software as an innovative and perspective computer security service capable of providing protection against a variety of contemporary viruses, Trojans , and other malware.
Nevertheless, its ability to protect users' devices against malware has always been questionable. This presumption can only be justified looking at the size of NSBlock executable which reaches only 2 MB. A file of such small size is unlikely to hold any advanced utilities which would be able to protect computers from potential malware attacks or exterminate malware that is already on the system.
Of course, it is not all hopeless. The program may block you from entering a few suspicious pages, but by no means should you trust it to fend off more sophisticated parasites such as ransomware . On the opposite, since this tool is monetized through pay-per-click advertising, it may attract malware to your system through random and often unsafe NSBlock ads.
Since NSBlock is monetized through ads, the experts tend to call it an adware. There are two types of adware: legitimate and malicious, and, unfortunately, this particular application is leaning more towards the latter. Ads by NSBlock are unpredictable and may link to potentially dangerous web content including compromised tech support websites, phishing pages and sites promoting fraudulent applications.
The virus will make these redirects possible with the help of an invisible extension that it installs on the web browser. An icon of this extension is invisible, so it virtually impossible to tell it has been installed without going through the list of installed extensions.
Needless to say, if you already find this component on your browser, you should disable it and proceed with NSBlock removal from the system. While the program is still on the computer, you should refrain from accessing online banking sites, social media platforms or email because you can never know what this invisible extension will be programmed to do next.

Check your browser and PC
- Address:
nsblock.net
How to remove NSBlock ads
How to stop NSBlock ads notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove nsblock.net from Chrome's notification list
Chrome keeps a list of every site you once allowed to send notifications, and
nsblock.netis on it. Pastechrome://settings/content/notificationsinto the address bar, find nsblock.net under Allowed to send notifications, open the three-dot menu next to it and pick Remove.Then click Add next to Not allowed to send notifications and type nsblock.net, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.

Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Google Chrome
Remove from Google Chrome
You may remove NSBlock from your computer manually or automatically, regardless, you will have to carry out the browser reset manually. Here is how to do it:
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Step 1: Remove nsblock.net from Edge's notification list
Open Settings and more (the three dots) > Settings > Privacy, search, and services > Site permissions > All permissions > Notifications. Remove
nsblock.netfrom the Allowed list, then click Add site next to Not allowed to send notifications and enter it there.Edge is built into both Windows 11 and Windows 10, so check it even if you normally use another browser. If the notifications came with the Edge logo, this is the browser that holds the permission.

Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Microsoft Edge
Remove from Microsoft Edge
NSBlock is a virus which installs browser extensions to have better control over the infected computer. You should follow instructions below to delete this extension from your browser.
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Step 1: Remove nsblock.net from Firefox's notification permissions
Open the menu (three lines) > Settings and click Permissions and data in the left list, then Notifications. Select
nsblock.net, click Remove Website and confirm with Save Changes.In versions older than Firefox 152 the same list sits under Privacy & Security, behind a Settings button next to Notifications. Firefox shows these notifications only while it is running, on Windows 11 and Windows 10 alike.

Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Instructions for Mozilla Firefox
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Our tested steps are for Windows 11 and 10. For Safari (Mac), use the instructions below.
Instructions for Safari (Mac)
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
More removal instructions
For programs installed on the PC and older browsers. Open the one you need.
How does the NSBlock removal work?
If you are looking for a quick way to remove NSBlock virus, you will not do it better than by employing professional antimalware for the task.
Automatic antivirus utilities are great for malware elimination due to several reasons:
- they save time
- remove malware precisely
- protect from viruses in the future
Nevertheless, it is not too difficult to carry out manual NSBlock removal either.
Uninstall from Windows
NSBlock is a virus that mostly affects Windows operating systems and their browsers. We suggest you use the instructions below to remove it in case your device has been infected:
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Protect your privacy - employ a VPN
There are several ways how to make your online time more private - you can access an incognito tab.
However, there is no secret that even in this mode, you are tracked for advertising purposes. There is a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise.
Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and VPN will let you browse the Internet without a feeling of being spied or targeted by criminals.
No backups? No problem. Use a data recovery tool
If you wonder how data loss can occur, you should not look any further for answers - human errors, malware attacks, hardware failures, power cuts, natural disasters, or even simple negligence.
In some cases, lost files are extremely important, and many straight out panic when such an unfortunate course of events happen. Due to this, you should always ensure that you prepare proper data backups on a regular basis.
If you were caught by surprise and did not have any backups to restore your files from, not everything is lost. is one of the leading file recovery solutions you can find on the market - it is likely to restore even lost emails or data located on an external device.
Questions about NSBlock ads
Why do I get notifications from nsblock.net when the browser is closed?
Chrome and Edge can keep a small part running in the background so that sites can deliver notifications, and Windows shows them in its notification area. That is why messages from nsblock.net keep arriving with no browser window open.
The permission to send them was granted when someone clicked Allow on a prompt from that site, often disguised as a robot check or a video player. Closing the browser does not remove it; only the notification settings do.
Remove nsblock.net from the allowed sites and the background messages stop. You can also stop the browser from running in the background in its system settings, but the permission is the real fix.
Did a notification from nsblock.net infect my computer?
A notification cannot infect a PC. It is a short text with a link that the browser displays. Clicking it opens a page, and a page cannot install anything unless you agree to a download and run the file.
So the answer depends on what you did after clicking. Looked and closed: you are fine. Downloaded but did not open: delete the file.
Opened a downloaded file: uninstall what it added and scan the PC. Typed card or login details: contact the bank and change the password. In every case, remove nsblock.net from the browser's allowed notifications so the messages stop.
Why does NSBlock ads show me ads?
Because that is its whole purpose. NSBlock ads is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.
They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.
Is nsblock.net safe to visit?
No. The site nsblock.net exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.
Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.
Which browser is sending the nsblock.net notifications?
Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from nsblock.net came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.
If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.
How do I know the ads come from NSBlock ads?
Look for notifications from nsblock.net. That is the trace NSBlock ads leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.
A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.
An ad showed a phone number and I called it. What now?
The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.
If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.
I clicked on one of the ads. Am I infected?
Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.
You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.
Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.
Will Focus or Do not disturb stop the notifications?
Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.
Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.
Will Fortect remove NSBlock ads?
No program removes NSBlock ads itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Malwarebytes labs: What are trojans? (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)
- Microsoft Learn: How Microsoft names malware (read October 6, 2026)