With Microsoft's Intervention, LG Agrees to Stop McAfee Ads, But Silent App Distribution Remains

• What happened: On July 22, 2026, LG agreed to stop the McAfee pop-ups in Monitor App Installer.
• Why it matters: A pathway was exploited in which connecting a monitor triggers Windows to silently install manufacturer-made apps without notification.
• What to watch next: Whether distribution review and consent screens will also be revised remains undetermined, as does how far the update will reach existing PCs.

Microsoft intervened after LG-branded monitors connected to Windows PCs triggered the installation of "LG Monitor App Installer," which repeatedly displayed screens recommending McAfee products. Pavan Davuluri, EVP of Windows + Devices, revealed on July 22, 2026, that LG had agreed to disable the McAfee pop-ups from the app.

However, the announced measure is limited to an agreement to disable the ad display. There has been no announcement of removing LG's app from Windows Update, nor of adding a consent screen before installation. The Windows design that delivers a Store app merely from connecting a monitor remains unchanged.

What Microsoft Secured Was an Agreement to Stop McAfee Pop-ups

On July 19, Davuluri responded to a report of the issue from Epic Games' Tim Sweeney, saying "the team is investigating." In a post three days later, he explained that Microsoft had discussed the matter with LG and, as an "immediate next step," secured an agreement to disable the McAfee pop-ups. He did not state that distribution via Windows Update had been halted.

In the controversy, three separate behaviors are easy to conflate. What Windows acquired without notification was the LG Monitor App Installer, and it was that app which displayed pop-ups recommending a McAfee free trial. Regarding the McAfee security product itself, LG stated in a comment to Windows Latest that it "is only installed if the user chooses to and consents."

The occurrence of the pop-up did not rely solely on user reports. Gamers Nexus conducted a reproduction test using the LG UltraGear 34GX900A-B and confirmed that Monitor App Installer appeared about one minute after Windows installed LG's driver package. Across 32 subsequent boots, the McAfee prompt appeared in 31 of them, according to the report. Windows Latest also preserved a Microsoft Store changelog from that time showing McAfee added as an "Additional App," with language encouraging a 30-day free trial.

While this test strongly supports the behavior occurring on the 34GX900A-B, it does not support generalizing to all LG monitor models. Microsoft's official response also does not indicate which models are affected, when a corrected version of the app will be released, or when it will reach existing PCs.

Four Stages from Connecting a Monitor to Getting a Store App

What delivered the software was not the monitor itself, but the distribution pathway Windows provides for peripherals. Microsoft's developer documentation explains the automatic acquisition of UWP device apps in four stages. When a device is connected, Windows retrieves device information from Windows Metadata and Internet Services. It then identifies the app associated with that information, installs drivers from Windows Update if necessary, and finally installs the Store app for the current user.

This mechanism operates under the condition that recommended settings were chosen during Windows setup, the user is signed in to Microsoft Store, and the device is connected to the internet. If the connection condition is met later, Windows will retry. The process runs in the background, and Microsoft itself warns developers that "because no notification is shown when installing the app, it can confuse and frustrate the user."

The current Store catalog entry for LG Monitor App Installer lists the publisher as LG Electronics Inc., with the distribution type recorded as "WindowsUpdate." The description lists four apps: OnScreen Control, LG Switch, Dual Controller, and LG Calibration Studio. According to LG's product support, LG Switch provides screen settings, split-screen display, and shortcuts to video conferencing apps. There is a legitimate use case tied to the monitor.

On the other hand, the Store catalog lists permission indicators such as "use all system resources" and "access your internet connection." These indicate the capabilities the package can use, not evidence that personal data was actually collected. LG has explained that its installer does not access, collect, or transmit customers' personal data.

In Windows, drivers, device metadata, and Store apps are managed separately. According to Microsoft's documentation, even if the device is removed, the Store app is not removed and must be manually uninstalled by the user. It is not designed to revert automatically when the monitor is disconnected.

Gaps in Distribution and Review Remain Even After the Ad-Stop Agreement

As of the Store catalog update on July 24, the mention of McAfee has been removed. This change aligns with Microsoft's announcement, but the catalog does not indicate a distribution version or release notes. It cannot be confirmed whether the pop-up has stopped on all PCs where the app was already installed.

Microsoft Store's publishing policies contain provisions that directly overlap with this behavior. Section 10.2.3 states that apps must not suggest installing secondary software that the publisher did not develop and that does not enhance the product's functionality. Section 10.9.4 similarly states that notifications must relate to the publisher's own products or Store products from the same publisher, and must not include unrelated advertising.

The role of Monitor App Installer, as described by LG's official support, is to install LG-made apps used for screen control and color calibration. The McAfee security product does not fulfill that function. That said, Microsoft has not disclosed whether the ad in question constituted a violation of Store policy. The explanation has been limited to stating that an agreement was reached with LG to stop the display, leaving unclear what the review process missed or how recurrence will be prevented.

While the current Store catalog has removed the McAfee mention, it still lists Monitor App Installer as software that installs four LG-made apps. The distribution type also remains WindowsUpdate. An agreement to disable ad display and a reform of the mechanism by which peripheral manufacturers distribute software leveraging Windows' trust are two separate measures.

What Users and Administrators Can Control

On PCs where LG Monitor App Installer has already been installed, users need to manually remove it by going to Settings > Apps > Installed apps. This is because, per Microsoft's specifications, removal is not linked to device removal. Even users who have not installed the McAfee product may want to check whether LG's installer remains among their startup items.

On Windows 10 version 1809 and later, Pro, Enterprise, and Education support this setting, and IoT Enterprise is also included. Administrators can enable "Prevent device metadata retrieval from the Internet" via Group Policy or a device management policy. The path is Computer Configuration > Administrative Templates > System > Device Installation. If the policy is not configured, the behavior follows the Device Installation Settings in Control Panel.

This setting is not an LG-specific block. Because it collectively blocks manufacturer-made apps tied to device metadata, it may also prevent useful companion apps for printers, cameras, and other devices from being delivered. Microsoft's documentation separates driver acquisition and app acquisition into distinct stages, and this setting targets the latter.

Microsoft has deprecated the legacy device metadata mechanism and plans to remove it in a future version of Windows. However, its successor, Driver Package Container Metadata—available since Windows 11 24H2's KB5052093, OS Build 26100.3323—still includes, per the documentation, an "AddSoftware" capability that associates Store apps with driver packages. Retiring the old mechanism alone does not make user consent mandatory.

This response can be said to have changed Windows' distribution practices only once the scope of the fix's rollout is disclosed, the Store review's judgment is made clear, and users are given a choice before an app is acquired. What Microsoft implements following its "immediate next step" will serve as the deciding factor for peripherals beyond LG as well.