ItsGeekToMe.co

Q: Occasionally, my laptop (Lenovo) presents a red-and-white McAfee set of windows that won’t allow me to just erase them. I either have to get out of Edge, my usual connection, or hit the power button to get back to normal. I never have used McAfee. I have checked my task manager and control panel programs — nothing there seems to be related to McAfee. I liken this takeover to a virus. It is annoying more than dangerous. I have MS Defender and Webroot watching over me. I have not seen any other similar takeover from other companies. Any suggestions?

– Morris F.
Navarre, Florida

A: Greetings, Morris!  Readers, Morris revealed some personal information in an email chat we had the other day, and it turns out that he was in the periphery when Del Stone and I first set up It’s Geek To Me way back in 2007.  Thanks for hanging around, Morris, and for your contributions to getting the column past it’s 1000 issue milestone.

On to your question.  You are dealing with one of the most common tricks on the modern internet. Your comparison to a virus is accurate because it hijacks your desktop, locks your controls, and uses intimidation to disrupt your day.

The good news is that your Lenovo laptop is not infected with a virus, and McAfee has not secretly installed itself. Because you checked your Windows Task Manager and Control Panel and found nothing, you have already proven that there is no rogue software running on your computer.

What you are witnessing is a browser-based illusion; specifically, a tech-support scam operating inside Microsoft Edge. These fake warning pages use malicious web scripts to disable your ability to close the tab trying to panic you into calling a phone number or purchasing software you don’t need.  Since it lives entirely within Edge, we can kick this phantom out without you hitting the physical power button.

When this red-and-white window traps you, forcing a hard shutdown by holding the power button works, but only temporarily. It can harm your Windows operating system and files, which don’t really like it when the system is abruptly powered down. Instead, use this clean method to force-close the locked browser using your keyboard:

• Press [Ctrl]+[Shift]+[Esc] simultaneously to open the Windows Task Manager.
• In the list of running apps, highlight Microsoft Edge and click “End Task”. This instantly cuts the power to the browser, freeing your screen.
• The Crucial Next Step: When you relaunch Microsoft Edge, it will likely ask you if you want to “Restore pages?” Choose NO. If you restore the session, it will reload the exact malicious script that trapped you in the first place!

I bet you’re wondering how this phantom got in at all, since McAfee isn’t on your machine. There are two primary avenues these pop-ups use to find their way onto your screen:

1. Rogue Web Notifications:  The most likely culprit is that a website you previously visited tricked you into giving it permission to send notifications. If you accidentally clicked “Allow” while trying to read an article, or view a video, that website now has permission to push alerts to your desktop. The worst of these alerts are deliberately designed to look like an official page, such as McAfee or Windows security warnings.

To clear these out of Microsoft Edge:  Open Edge, click the three dots (…) in the top-right corner, and select Settings.  Click on Cookies and site permissions on the left menu, then select Notifications.  Look at the list under the Allow section. If you see any web addresses you don’t recognize, click the three dots next to them and choose “Remove” or “Block”.

2. “Malvertising” (Poisoned Ads): If your notifications list is clean, you are likely encountering malvertising. This occurs when mainstream, legitimate websites inadvertently host a malicious advertisement supplied by a compromised third-party ad network. When you load the page, the bad ad triggers an automatic redirect that forces your browser to the fake McAfee scam site.

To stop this from happening, install a reputable ad-blocking extension. Open Edge, go to the Extensions menu (the puzzle piece icon), visit the Edge Add-ons store, and look for uBlock Origin. It is free, lightweight, and will block these malicious script-heavy ads before they can ever load and lock up your browser.

You mentioned that you have both Microsoft Defender and Webroot. Running two real-time antivirus products simultaneously can cause them to conflict, slow down your system or cause them to miss threats.

Windows Defender usually steps into a passive mode when it detects Webroot, but it’s worth verifying that Webroot is your primary active shield. However, because these McAfee pop-ups are just code running inside a webpage rather than actual files downloaded to your hard drive, your antivirus tools don’t always catch them. Adding uBlock Origin to your web browser will fill that gap.

Clean out those Edge notification permissions, add an ad-blocker, and the next time the McAfee phantom tries to take over your screen, you’ll know exactly how to shut it down.

---

To view additional content, comment on articles, or submit a question of your own, visit my website at ItsGeekToMe.co (not .com!)