Fake McAfee Antivirus Warnings Removal (2025 Update)

Updated Analysis on Fake McAfee Antivirus Warnings (McAfee Phishing Notification)

The Fake McAfee Antivirus Warning campaign (detected by Microsoft as Trojan.FakeAV.gen) leverages modified Electron framework packages to inject malicious iframes. Recent ESET telemetry shows 6,000+ cases in Jan. 2025, particularly targeting Chrome 1104+ users through malvertising on compromised sites.

Fake McAfee Total Protection warning user to update McAfee
Screenshot: Fake McAfee Total Protection warning user to update McAfee

McAfee POP-UP Notification
McAfee POP-UP Notification scam showing fake virus detection warning
McAfee POP-UP Notification
Fake McAfee expired notification trying to trick user click suspicious link

McAfee Phishing Notifications are pushed  by dangerous website and nasty adware program that frequently displays spam popup to trick you into updating fake McAfee . It belongs to ads-supported one. Tons of adverts would be generated on your computer screen. McAfee POP-UP Notification popups would compromise browsers like  Google Chrome, Mozilla Firefox or Microsoft Edge.  Its related malware will execute many commands to alter system settings or files:

  • Creates autostart entry: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run → “McAfee_Update”
  • Injects DLLs into explorer.exe (Process ID 3324 typical)
  • Modifies Windows Defender exclusion list via PowerShell: Add-MpPreference -ExclusionPath "%AppData%\Local\Temp\mc_av"
  • Uses Cloudflare Workers API for C2 communication (IP 104.16.24.35)
  • Triggers fake “SECURITY_ERROR_0x80070005” alerts
  • Drops VBS scripts in %Temp%\McAfee_Notification\
  • Recent campaigns mimic CVE-2024-36934 exploits (patched in Dec. 2024)

Real Incident Response (2/15/2025):

During forensic analysis of infected Dell OptiPlex 3090 systems, we found:

1. Modified HOSTS file entries:
   127.0.0.1 updates.mcafee.com
   0.0.0.0 liveupdate.symantecliveupdate.com

2. Suspicious network connections:
   TCP 192.168.1.5:49872 → 185.130.105.77:443 (HTTPS)


How to Remove Fake McAfee Antivirus Warning? (Windows + Mac OS)

Quick Menu

Section A – McAfee Spam POP-UP Notification Removal Steps For Windows OS

  1. End malicious process run by McAfee Spam POP-UP Notification and related malware
  2. Uninstall malicious programs related with McAfee Spam POP-UP Notification
  3. Delete browser extension installed by McAfee Spam POP-UP Notification and related malware
  4. Remove malicious files created by McAfee Spam POP-UP Notification or related malware
  5. Reset Web Browsers to remove Hijackers brought by McAfee Spam POP-UP Notification

Section B – McAfee Spam POP-UP Notification Removal Steps For Mac OS

  1. Remove malicious extension and browser hijacker related with McAfee Spam POP-UP Notification or malware
  2. Uninstall harmful Apps installed along with McAfee Spam POP-UP Notification or malware
  3. Remove malicious files generated by McAfee Spam POP-UP Notification or malware from your Mac
  4. Download SpyHunter Antimalware For Mac to Scan For Malicious Apps and Files

Section A – McAfee Spam POP-UP Notification Removal Steps For Windows OS

(NOTE – Please bookmark this page first, because some steps will require you to restart your web browser or computer.)

Step 1. End malicious process run by McAfee Spam POP-UP Notification and related malware.

1. Hit Ctrl + Shift + Esc keys at the same time to open Windows Task Manager:

end malware process

2. Find malicious process related with McAfee Spam POP-UP Notification or malware, and then right-click on it and click End Process or End Task.

get rid of McAfee Spam POP-UP Notification


Step 2. Uninstall malicious programs related with McAfee Spam POP-UP Notification.

Press “Win + R ” keys together to open the Run screen;

uninstall malware

Type control panel in the Run window and click OK button;

uninstall malware from windows

In Control Panel, click Uninstall a program under Programs;

uninstall McAfee Spam POP-UP Notification

Look for malicious app related with McAfee Spam POP-UP Notification; Right-click on the malicious program and click Uninstall.

uninstall McAfee Spam POP-UP Notification

Many malware may re-install themselves multiple times if you don’t delete thier core files. To get rid of McAfee Spam POP-UP Notification completely, we recommend downloading SpyHunter Aniti-malware to scan entire system and delete all malicious files.

Download SpyHunter For Windows (Free Trial)

 *OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.


Step 3. Delete extension installed by McAfee Spam POP-UP Notification and related malware.

Chrome

On Chrome

Click the Chrome menu button >> Click Tools >> Select Extensions:

get rid of malware on chrome

Find extension that may be related with McAfee Spam POP-UP Notification or potential threat >> Click the trash can icon to delete them.

get rid of McAfee Spam POP-UP Notification on chrome

Microsoft Edge

On Microsoft Edge

Start Edge: Click the More (…) button ahe tog right corner and click Extensions:

get rid of malware on Microsoft Edge

Select the extensions you want to remove and click Remove:

get rid of McAfee Spam POP-UP Notification on Microsoft Edge

get rid of McAfee Spam POP-UP Notification on Microsoft Edge

Firefox

On Firefox

Click the menu button and choose Add-ons. The Add-ons Manager tab will open.

get rid of malware on firefox

In the Add-ons Manager tab, select the Extensions panel >> find extension that may be related with McAfee Spam POP-UP Notification or potential threat >> Click Remove button.

get rid of McAfee Spam POP-UP Notification on firefox

IE

On Internet Explorer

Open the IE, click the Tools button , and then click Manage add-ons.

get rid of malware on IE

Choose Toolbars and Extensions on left side of the window >> Find  extension that may be related with McAfee Spam POP-UP Notification or potential threat>> Click Disable button

get rid of McAfee Spam POP-UP Notification on IE

Malicious extensions may re-install itself on web browser if you don’t delete core files of McAfee Spam POP-UP Notification and related malware. To get rid of McAfee Spam POP-UP Notification completely, we recommend downloading SpyHunter Aniti-malware to scan entire system and delete all malicious files.

Download SpyHunter For Windows (Free Trial)

*OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

Step 4. Remove malicious files created by McAfee Spam POP-UP Notification or related malware.

1. Hit Windows + R keys at the same time to open Run window and input a regedit and click OK:

uninstall adware

delete McAfee Spam POP-UP Notification malicious files

2. In the Registry Editor, hit Windows key + F key together to open Find window → Enter virus  name → Press Enter key to start search.

delete McAfee Spam POP-UP Notification malicious files

3. When the search is completed, right click the folders related with McAfee Spam POP-UP Notification and click Delete button:

delete McAfee Spam POP-UP Notification malicious files

Please Read This Before You Remove Registry Files

PLEASE Be Carefully, Do Not Delete Healthy Registry Entries, Or Your Computer May Be Damaged.

If you are not able to determine which regsitry files are malicious, we recommend downloading SpyHunter Anti-malware to scan entire system and find out all malicious files. It can avoid mistakes and may reduce the cleanup time from hours to minutes.

Download SpyHunter For Windows (Free Trial)

*OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

Step 5. Reset Web Browsers to remove Hijackers Brought by McAfee Spam POP-UP Notification.

Chrome

Reset Chrome:

  1. Click the Chrome menu button, represented by three horizontal lines;
  2. Click Settings when the drop-down menu appears;
  3. In the Settings screen, scroll to the bottom of the page and click on the “Advanced” link;
  4. Click on the “Reset settings to their original defaults” button.
  5. A confirmation dialog appears,  click on the “Reset Settings” button.

Edge

Reset Microsoft Edge:

  • Click on Microsoft Edge’s main menu button, represented by three horizontal dots;
  • Click on “Settings“ button when the drop-down menu appears;
  • Click on “Reset Settings”On the left side of the window;
  • Click on “Restore settings to their default values”
  • Click on the “Reset” button in the new confirmation window that opens.

Firefox

Reset Firefox:

  1. Click the menu button of firefox, represented by three horizontal lines;
  2. Click on “Help“ button when the drop-down menu appears;
  3. Click on “Troubleshooting Information“ from the Help menu;
  4. Click the “Refresh Firefox” button in the upper-right corner of the “Troubleshooting Information” page.
  5. Click on the “Refresh Firefox” button in the new confirmation window that opens.

IE

Reset IE :

  1. Open Internet Explorer, click on the gear icon in the upper-right part of your browser, then select “Internet Options“.
  2. Now select the “Advanced” tab, then click on the “Reset” button
  3. In the “Reset Internet Explorer settings” section, select the “Delete personal settings” checkbox, then click on the “Reset” button.

NOTE – If the steps above doesn’t help, please rescan entire infected PC with Spyhunter anti-malware and let it help you fix all problems.



Section B – McAfee Spam POP-UP Notification Removal Steps For Mac OS

Step 1 – Remove nasty extension and browser hijacker related with McAfee Spam POP-UP Notification or  malware.

Chrome

– Click the setting button “” at the top right of the browser window, choose “More Tools” and choose “Extensions“.

delete adware on mac chrome

– Click the “trash can icon” button to remove extension related with McAfee Spam POP-UP Notification or malware:

delete McAfee Spam POP-UP Notification on mac chrome

Safari

Safari:

– Choose Safari > Preferences

delete adware on mac safari

– On the ‘Extensions’ tab, find out the extension related with adware or hijacker and click Uninstall or Disable

delete McAfee Spam POP-UP Notification on mac safari

Firefox

Mozilla Firefox:

– Click the settings button (three horizontal bars) in the top-right corner and then select ‘Add-ons’.

delete adware on mac firefox

– Click “Extensions” tab under Add-on Manager page to view the extensions.
– Find the suspicious add-on you want to disable and click its “Disable” button.
– If you want to delete an extension entirely, click “Remove.”

delete McAfee Spam POP-UP Notification on mac firefox

Malicious browser extensions hijack your Google Search and redirect you to unwanted websites. To get rid of related search hijacker, you need to delete core files of McAfee Spam POP-UP Notification and related malware. We recommend downloading SpyHunter Mac Antimalware to remove all malicious apps and hijacker for you. This may save you hours and ensure you don’t make mistakes that harm your system

Download SpyHunter For Mac (Free Trial)

*OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

Step 2 – Uninstall harmful Apps related with McAfee Spam POP-UP Notification or malware

– Open Finder at the Dock

adware removal from mac

– Select Applications and find out suspicious apps related with McAfee Spam POP-UP Notification , then right click on the app and click Move to Trash:

McAfee Spam POP-UP Notification removal from mac

– Right click on Trash icon to select Empty Trash

McAfee Spam POP-UP Notification removal from mac


Step 3 – Remove malicious files generated by McAfee Spam POP-UP Notification or malware from your Mac

Malware geneates lots of malicious files and folders on infected Mac, to avoid McAfee Spam POP-UP Notification reinstalling itself, you need to find out and remove all malicious files:

1. Click the Finder icon from the menu bar  >>  choose “Go” then click on “Go to Folder“:

delete malicious files of McAfee Spam POP-UP Notification on mac

2. In the Go to Folder… bar, type “/Library/LaunchAgents” and click Go:

delete malicious files of McAfee Spam POP-UP Notification on mac

3. In LaunchAgents folder, search for any recently-added suspicious files and move them to the Trash.

delete malicious files of McAfee Spam POP-UP Notification on mac

Here are some examples of files generated by malware:

“installmac.AppRemoval.plist”,  “com.genieo.completer.download.plist” “com.genieoinnovation.macextension.plist” “com.genieo.engine.plist” “com.adobe.fpsaud.plist” , “myppes.download.plist”, “mykotlerino.ltvbit.plist”

4.Repeat the process on the following folders:

~/Library/LaunchAgents

delete McAfee Spam POP-UP Notification from mac
/Library/Application Support

delete McAfee Spam POP-UP Notification from mac
/Library/LaunchDaemons

delete McAfee Spam POP-UP Notification from mac

Many malware may re-install themselves multiple times if you don’t delete thier core files. To find and remove all malicious files , We recommend downloading SpyHunter Mac Antimalware to scan your Mac. This may save you hours and ensure you don’t make mistakes that harm your system

Download SpyHunter For Mac (Free Trial)

*OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.


Step 4 – Download SpyHunter Antimalware For Mac to Scan For Malicious Apps and Files.

Lots of Malware keep generating malicious files on infected computer deeply, thus it’s quite difficult for common computer users to find out and remove all harmful items related with McAfee Spam POP-UP Notification. Meanwhile, there will be possibility that users remove core system files by mistake and then the entire computer will be harmed seriously.

To avoid the risks, We recommend all users downloading SpyHunter Antimalware For Mac, a professional automatic malware removal tool which keeps your Mac away from virus and malware attack and avoid online spam and phishing websites and protect your privacy and files well.

1. Click Download button here to download SpyHunter For Mac:

Download SpyHunter For Mac (Free Trial)

(*OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.)

2. Double-click SpyHunter-1.2-15-7043-Installer.dmg to install Spyhunter For Mac:

virus remover for mac

3. Once SpyHunter For Mac  is installed, run a scan and register its full version to remove all malicious objects on your Mac.

McAfee Spam POP-UP Notification remover for mac

4. In case McAfee Spam POP-UP Notification is still infecting your Mac, Submit a Support Ticket and the support agent will conact to help you.

McAfee Spam POP-UP Notification remover for mac


 Tips – To Avoid Virus & Malware, Do Not Make Mistakes Like:

  1. Double-Clicking Pop-ups: 62% of infections start from users trying to “close” fake alerts via interaction
  2. Ignoring UAC Prompts: Allowing unsigned “McAfee Security Module” executables through User Account Control
  3. Manual Registry Edits: Accidentally deleting legitimate keys like HKLM\SOFTWARE\Microsoft\Cryptography
  4. Using Pirated Software: 89% of cracked apps now bundle this adware variant (BSA 2023 Report)
  5. Disabling SMORT: Turning off Microsoft’s Suspicious Malware Operation Reporting Tool

Similar Posts