Charles and the Fake McAfee Virus Warning
Charles called because his computer was suddenly filling with frightening McAfee warnings saying viruses and ransomware had been detected. They looked legitimate enough to be alarming, especially because they appeared as Windows notifications even when he was not intentionally visiting the site.
I had helped Charles before with a printer that lost its Wi-Fi connection, so I knew his setup. I disconnected the computer from the Internet while checking the proxy settings, browser history, Task Scheduler, browser extensions, and antivirus status. The proxy settings were normal, nothing suspicious appeared in Task Scheduler, and Webroot reported no active threat.
The clue was in Microsoft Edge. A random protectcloudarc.co.in subdomain had been granted permission to send notifications. The fake McAfee warnings were coming from that website through Edge. They were not McAfee alerts and they were not proof that Windows had found a virus. I removed the notification permission and stored site data, blocked the source, and confirmed there were no suspicious browser extensions.
The fix was simple once the source was found, but this kind of scare is effective because it looks like a real security emergency. If a browser suddenly claims you have dozens of viruses or ransomware, especially when it wants you to click a button or call a number, do not follow the warning. Disconnect if necessary and have the computer checked first.
Related service: Computer Scam & Fraud Help.
