Orange-note-wmca1.click ads: what it is and how to remove it
Orange-note-wmca1.click is a bogus website that uses the names of well-known antivirus software brands. As an incentive, they offer a discount, to make it look like people are getting a good deal.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Clicked a notification from orange-note-wmca1.click and installed something? A free scan checks programs and browsers in one pass.
Do it yourself · free Remove Orange-note-wmca1.click ads yourself 2 steps, about 6 minutes, no software needed.
Orange-note-wmca1.click ads: summary
| Distribution | Shady websites, deceptive ads, bundled software |
|---|---|
| NAME | Orange-note-wmca1.click |
| TYPE | Push notification spam; adware |
| SYMPTOMS | Pop-up ads start appearing in the corner of the screen, sometimes even when the browser is closed |
| DANGERS | Links embedded in the push notifications can lead to installations of potentially unwanted programs or even malware |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 11 more facts
| Damage | Not recorded in the old report |
|---|---|
| Name | Orange-note-wmca1.click |
| Type | Push-notification spam site |
| Symptoms | Notification spam from a website |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | orange-note-wmca1.click |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 8 December 2021 |
| Facts checked | 6 October 2026 |
Is Orange-note-wmca1.click ads dangerous?
From our report of Dec 2021 · not reviewed since
Orange-note-wmca1.click tries to fool users into installing a PUP or malware disguised as AV software
Orange-note-wmca1.click is a bogus website that uses the names of well-known antivirus software brands.
As an incentive, they offer a discount, to make it look like people are getting a good deal.
You will not know if the software is actually doing its job or if it is not a PUP (potentially unwanted program) or malware.
Fraudsters often use the names of companies and products that are widely known to appear legitimate and gain trust right away. However, if you pay close attention, you can find grammar or spelling mistakes and see that the website looks fishy and low quality. If you are unsure if the page is legitimate, always look for the information on external sources.
What is more, sometimes pages like this start sending pop-ups straight to users' screens that supposedly warn them about virus infections and that they need to take action immediately. There should be no doubt that these kinds of messages are just an attempt to scare people into downloading the software.
In recent years, cyberattacks have increased dramatically, and users are looking for ways to protect themselves. Crooks have noticed this pattern and rushed to exploit it. Pages like Antivirus-protection.shop, Antivirus.safe-web-pc.com, and Protectionyoupc.com can rarely be found in the search results. They usually appear unexpectedly while users are surfing the web.
From our report of Dec 2021 · not reviewed since
Block annoying pop-ups
To block site permissions, you have to do it manually via browser settings because push notifications are based on a subscription model.
Almost every website you visit uses cookies to track your browsing activity, like the pages you visit, links you click on, and purchases you make.
The fact that you have pop-ups appearing from questionable sources means that you most likely were surfing through web pages you should not. Your browsing data might be exposed or sold to advertising networks that use it to target you with even more ads. But first, you have to stop the pop-up ads from appearing. You can do that by following our step-by-step guide:
Google Chrome (desktop):
Google Chrome (Android):
MS Edge (Chromium):
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Locate the unwanted URL and toggle the button to the left (Off setting).
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click Settings button next to it.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Click on Safari > Preferences...
- Go to Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.
- Toggle the switch to the left to turn notifications off on Microsoft Edge.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
- Open Internet Explorer, and click on the Gear icon at the top-right on the window.
- Select Internet options and go to Privacy tab.
- In the Pop-up Blocker section, click on Settings.
- Locate web address in question under Allowed sites and pick Remove.
From our report of Dec 2021 · not reviewed since
More from our earlier report on Orange-note-wmca1.click
- It makes people think that their system is in danger and that they need to buy an antivirus (McAfee or Norton) to protect their devices.
- The reality is that this website is not owned by McAfee or Norton but by shady individuals whose identities are unknown.
- Disable push notifications via browser settings
How Orange-note-wmca1.click ads got into your browser
From our report of Dec 2021 · not reviewed since
The appearance of Orange-note-wmca1.click can be caused by various things.
One of the possibilities is that you were browsing through already shady pages and clicked on a deceptive ad or you were redirected. Another possibility is that you have adware installed in your system that is causing redirects to questionable sites.
You have to think about what you were doing and how you ended up on the site. Usually, people browse through pages that engage in illegal activities, like illegal streaming platforms. There are a lot of fake "Download" and "Play" buttons and sneaky redirects that open new tabs in ads in them.
Or maybe your browser is affected by a hijacker and you were actually looking for antivirus software, but the hijacker is affecting the search results and injecting dangerous links between them. As it is unknown how this particular page is spread, we can only guess. Generally, you just have to avoid suspicious sites and not click on random links if you want to avoid scam pages.
Check your browser and PC
- Address:
orange-note-wmca1.click
How to remove Orange-note-wmca1.click ads
How to stop Orange-note-wmca1.click notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove orange-note-wmca1.click from Chrome's notification list
Chrome keeps a list of every site you once allowed to send notifications, and
orange-note-wmca1.clickis on it. Pastechrome://settings/content/notificationsinto the address bar, find orange-note-wmca1.click under Allowed to send notifications, open the three-dot menu next to it and pick Remove.Then click Add next to Not allowed to send notifications and type orange-note-wmca1.click, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove orange-note-wmca1.click from Edge's notification list
Open Settings and more (the three dots) > Settings > Privacy, search, and services > Site permissions > All permissions > Notifications. Remove
orange-note-wmca1.clickfrom the Allowed list, then click Add site next to Not allowed to send notifications and enter it there.Edge is built into both Windows 11 and Windows 10, so check it even if you normally use another browser. If the notifications came with the Edge logo, this is the browser that holds the permission.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove orange-note-wmca1.click from Firefox's notification permissions
Open the menu (three lines) > Settings and click Permissions and data in the left list, then Notifications. Select
orange-note-wmca1.click, click Remove Website and confirm with Save Changes.In versions older than Firefox 152 the same list sits under Privacy & Security, behind a Settings button next to Notifications. Firefox shows these notifications only while it is running, on Windows 11 and Windows 10 alike.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
More removal instructions
For programs installed on the PC and older browsers. Open the one you need.
Another removal option
We suggest using trusted professional security tools or to scan your machine automatically.
It should detect most suspicious apps and remove them successfully.
PUPs are silent perpetrators and they hide in the background of the system and perform their tasks. PUAs are mostly used by freeware distribution sites to generate revenue. They include them in the installers without clearly disclosing it on the site. Most people do not notice the additional programs because they skip through the installation steps.
Of course, you can also remove a PUP manually, but it is unknown which particular app could be causing annoying behavior, so removing it can be difficult if you do not have experience - you risk deleting the wrong applications. If you know which program is at fault, use our guide to help you uninstall it:
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
- Pick the unwanted application by clicking on it once.
- At the top, click Uninstall/Change.
- In the confirmation prompt, pick Yes.
- Click OK once the removal process is finished.
- From the menu bar, select Go > Applications.
- In the Applications folder, look for all related entries.
- Click on the app and drag it to Trash (or right-click and pick Move to Trash)
- Select Go > Go to Folder.
- Enter /Library/Application Support and click Go or press Enter.
- In the Application Support folder, look for any dubious entries and then delete them.
- Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
Questions about Orange-note-wmca1.click ads
Why do I get notifications from orange-note-wmca1.click when the browser is closed?
Chrome and Edge can keep a small part running in the background so that sites can deliver notifications, and Windows shows them in its notification area. That is why messages from orange-note-wmca1.click keep arriving with no browser window open.
The permission to send them was granted when someone clicked Allow on a prompt from that site, often disguised as a robot check or a video player. Closing the browser does not remove it; only the notification settings do.
Remove orange-note-wmca1.click from the allowed sites and the background messages stop. You can also stop the browser from running in the background in its system settings, but the permission is the real fix.
I clicked a notification from orange-note-wmca1.click. What should I do?
If you only opened the page and closed it, nothing else is needed besides removing the permission from orange-note-wmca1.click. If the page asked for card details, a phone number or a password and you entered them, act on that: call the bank to block the card, or change the password from another device.
If it offered a download, delete the file unopened, or uninstall it from Installed apps if you ran it, then run a full scan. If you called a number shown on the page, follow the steps for callers in this guide. Finally, remove the permission so that no more messages arrive.
Why does Orange-note-wmca1.click show me ads?
Because that is its whole purpose. Orange-note-wmca1.click is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.
They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.
Is orange-note-wmca1.click safe to visit?
No. The site orange-note-wmca1.click exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.
Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.
Which browser is sending the orange-note-wmca1.click notifications?
Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from orange-note-wmca1.click came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.
If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.
How do I know the ads come from Orange-note-wmca1.click?
Look for notifications from orange-note-wmca1.click. That is the trace Orange-note-wmca1.click leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.
A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.
Why didn't my antivirus catch Orange-note-wmca1.click?
Many security products do not block adware or notification sites by default, because users often agreed to them, even through a misleading prompt. Notification spam installs nothing at all, so there is no file to detect.
In Windows 11 you can make Microsoft Defender block potentially unwanted apps: open Windows Security > App & browser control > Reputation-based protection settings and turn on Potentially unwanted app blocking. If notifications caused the pop-ups, no scanner will report them; the fix is in the browser's site settings.
Will Focus or Do not disturb stop the notifications?
Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.
Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.
I clicked on one of the ads. Am I infected?
Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.
You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.
Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.
Will Fortect remove Orange-note-wmca1.click?
No program removes Orange-note-wmca1.click itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Wikipedia: Potentially unwanted program (read October 6, 2026)
- Kaspersky: What is Adware? – Definition and Explanation (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)