All posts

LG monitors silently install adware via Windows 11 feature

Manaal KhanJuly 25, 2026 at 7:01 AM5 min read
LG monitors silently install adware via Windows 11 feature

Key Takeaways

LG monitors silently install adware via Windows 11 feature
Source: www.theregister.com
  • LG's Monitor App Installer auto-installs when certain LG monitors connect to Windows 11, displaying McAfee ads without user consent
  • The app requests access to all system resources, geo-location, credentials, and online activity
  • Microsoft's auto-install feature provides no notification when manufacturer apps are installed

LG's Monitor App Installer is silently installing itself on Windows 11 machines when users connect certain LG monitors, then serving pop-up advertisements for McAfee without warning. The app exploits a legitimate Windows 11 feature that lets manufacturers push UWP apps to devices automatically, and it has earned a 1.3-star rating in the Microsoft Store.

Advertisements

How does the auto-install actually work?

Windows 11 includes a feature that checks device metadata when external hardware connects. If users have opted into Recommended Settings during Windows setup, are signed into the Microsoft Store, and are online, the OS can silently install the manufacturer's UWP device app. Microsoft designed this to simplify setup. Users would not need to hunt through the Store or manufacturer websites for management utilities.

The catch: Microsoft's own documentation states that this automatic installation feature does not provide a notification to the user. The first sign something happened might be a new Start menu entry, a system tray icon, or in LG's case, a pop-up ad appearing out of nowhere.

Microsoft even warns manufacturers in its documentation that "some users may find this experience confusing and frustrating, and give your app a bad rating." LG's 1.3 stars suggest that prediction was accurate.

What permissions does LG's app request?

The Microsoft Store listing for LG Monitor App Installer states the app can access "all system resources" and the user's internet connection. According to Gamers Nexus, which published a video documenting the issue after a surge in user complaints, the app's permissions extend to geo-location, device data, online activity, contacts, user credentials, and transaction information.

"Adware was our thanks for spending $1,200 with LG," the Gamers Nexus presenter said, referring to the LG UltraGear monitor that triggered the installation.

The app itself has limited utility for managing monitor settings. Its primary visible behavior, for many users, is displaying advertisements for third-party services like McAfee antivirus.

LG's response: McAfee is optional

LG issued a statement after The Register's initial report. "LG Electronics reiterates that McAfee is not installed automatically and is never installed without the user's explicit consent," the company said. "The LG Monitor App Installer is distributed through Microsoft's official Windows distribution process, which included McAfee as an option. McAfee will be installed only if a user actively chooses to proceed with the installation and provides consent."

This statement sidesteps the core complaint. The issue is not that McAfee installs automatically. The issue is that LG's Monitor App Installer installs automatically, requests sweeping permissions, and serves McAfee advertisements to users who never asked for the app in the first place.

When users install the app manually from the Microsoft Store, they can review the requested permissions before proceeding. When the monitor triggers automatic installation, no such review happens.

Advertisements

Why IT teams should pay attention

Enterprise environments face a specific risk here. Users connecting LG monitors to corporate Windows 11 machines could inadvertently install software that requests access to credentials and online activity. The app installs silently if the machine meets Microsoft's criteria, which many corporate setups do by default.

The broader concern is the attack surface this feature creates. If a legitimate manufacturer like LG can push an app that serves ads, a compromised device metadata server could theoretically push something worse. Microsoft's feature trusts the manufacturer's app store listing. That trust may be misplaced.

The Register asked Microsoft whether it might tighten the automatic installation process to better inform users. Microsoft had not responded at the time of publication.

Also Read
AWS, Azure, Google converge on identical agent architecture

Enterprise IT teams managing hybrid cloud environments should understand how major vendors are aligning

How to prevent automatic app installation

IT administrators can disable this behavior through Group Policy or by ensuring users do not opt into Recommended Settings during Windows setup. The feature requires three conditions: Recommended Settings enabled, Microsoft Store sign-in, and network connectivity. Removing any one blocks automatic installation.

For individual users who already have the app installed, it can be uninstalled through Settings > Apps. The app does not appear to reinstall if the monitor is reconnected, though some users report needing to block it via the Microsoft Store's app management settings.

ℹ️

Logicity's Take

This incident exposes a design flaw in Windows 11's device app distribution that Microsoft should address. Allowing manufacturers to push apps silently, with no notification and no permission review, creates an obvious vector for unwanted software. LG is not the only vendor using this feature, and others may be less restrained. For enterprise IT, this is a reminder to audit default Windows 11 settings on managed devices. The "Recommended Settings" path during setup enables behaviors that may conflict with corporate security policies.

AspectManual Install (Microsoft Store)Auto-Install (Device Connection)
User notificationYes, explicit download actionNone
Permission reviewYes, visible before installNo, permissions granted silently
User consentRequiredNot required
Uninstall availableYesYes
Reinstall preventionUser-controlledRequires Group Policy or Store settings

Frequently Asked Questions

Which LG monitors trigger the automatic app installation?

Reports specifically mention the LG UltraGear line, but any LG monitor with associated device metadata in Microsoft's system could trigger the installation.

Does the LG Monitor App Installer install McAfee automatically?

No. The app itself installs automatically and displays McAfee advertisements. McAfee only installs if the user clicks through and consents.

Can I prevent Windows 11 from auto-installing device apps?

Yes. Disable Recommended Settings during Windows setup, or configure Group Policy to block automatic app installation from device metadata.

Is this behavior specific to LG?

No. Any hardware manufacturer can use Microsoft's device app auto-installation feature. LG's app is notable because of its ads and broad permission requests.

Has Microsoft responded to the complaints?

Not publicly. The Register asked Microsoft about tightening the process but had not received a response as of July 22, 2026.

ℹ️

Need Help Implementing This?

If your organization needs to audit Windows 11 device app policies or lock down auto-installation across managed endpoints, contact your endpoint management vendor or Microsoft partner for Group Policy templates and deployment guidance.

Source: www.theregister.com

M

Manaal Khan

Tech & Innovation Writer

Produced with AI assistance and reviewed by the Logicity editorial team. Learn more in our Editorial Policy.