Microsoft Gets LG to Disable McAfee Pop-Ups From Its Windows Monitor App

Microsoft has confirmed that LG has agreed to disable an unsolicited McAfee promotional pop-up delivered through its Monitor App Installer, following a wave of user complaints about the software silently arriving via Windows Update.

The issue began when Reddit user Mags_Smash reported that Windows Update had silently installed the “LG Monitor App Installer” after connecting three LG UltraGear monitors, with a McAfee trial pop-up appearing shortly after without any consent screen.

Windows Reliability Monitor and Event Viewer logs confirmed the installation originated from a background Windows Update process rather than any deliberate user action.

Microsoft Gets LG to Disable McAfee Pop-Ups

The story gained traction after reproducing the behavior on a $ 1,200 LG UltraGear 34GX900A-B monitor, triggering the McAfee pop-up on 31 of 32 consecutive boot cycles.

The app’s own changelog listed McAfee as an “Additional App” bundled in a recent update alongside marketing copy for a 30-day free trial, contradicting LG’s later claims that installation required explicit consent.

Public backlash pushed the LG Monitor App Installer’s rating down to a single star before the issue escalated further.

The complaint reached Microsoft’s Windows leadership after Epic Games CEO Tim Sweeney tagged Windows and Devices EVP Pavan Davuluri on July 19, 2026, noting reports of the behavior occurring “with arbitrary hardware”.

Davuluri responded within hours, confirming his team was investigating, and by July 22 Microsoft had connected with LG to secure a fix.

Davuluri’s official statement read: “Thanks again for bringing this to our attention. We’ve connected with the team at LG and as an immediate next step, they have agreed to disable the McAfee pop-up from their app. We appreciate LG working with us toward a shared goal of a better experience for our mutual customers. We will keep improving here with our ecosystem partners”.

LG issued a separate statement asserting that “McAfee is not installed automatically and is never installed without the user’s explicit consent,” and placed responsibility on Microsoft’s official Windows distribution process, which it said, “included McAfee as an option”. This framing conflicts with user-recorded evidence and the app’s own changelog documentation.

This incident highlights how Windows’ device metadata pipeline lets OEMs push companion apps automatically when hardware is connected, a mechanism Microsoft’s own developer documentation warns can confuse users badly enough to damage app trust.

Similar bootstrapping has occurred with other peripheral vendors, such as Razer’s camera drivers loading its Synapse software through the same channel, indicating this is not an isolated OEM behavior.

Notably, macOS has no equivalent mechanism allowing a connected peripheral to trigger App Store installations.

Microsoft has previously stated that most Windows 11 users do not need third-party antivirus software since Windows Defender already provides a full protection stack, though Microsoft quietly removed its own “Defender is enough”.

pavanda vuluri stated that tracking OEM bloatware trends, note that this rapid resolution, occurring within roughly a week of public escalation, is uncommon for cross-vendor commercial disputes involving companion software distribution.

Cut SOC investigation blind spots and contain threats earlier to reduce response costs and business disruption with ANY.RUN. 

Tamilselvan
Tamilselvanhttps://cyberpress.org/
Tamilselvan is an Investigative cybersecurity journalist dedicated to breaking stories on ransomware cartels, data breaches, and state-sponsored espionage.

Trending News

Related Stories