Developing Aug 3 — LG says the installer will start asking before it installs. No date, no version, no press release. Read it
LGSpyware A consumer alert by Critical Error Computing
Consumer alert · Windows

You plugged in a monitor. Windows installed adware. It's still there.

No prompt. Installed by SYSTEM in 32 seconds. Unplugging the monitor doesn't remove it.

Am I affected? Remove it
An LG monitor in a dark room showing red pixel text: YOUR MONITOR IS WATCHING YOU. LG Adware, System Alert.
By Critical Error Computing · Updated

What one cable does

Recovered from one of our own machines, timestamped.

How the LG Monitor App installs itself Connect the monitor at T plus zero. Windows Update delivers two LG packages signed as drivers with no driver code. One fabricates a phantom device so the other can bind to it. At T plus 32 seconds, SYSTEM installs the LG Monitor App from the Microsoft Store with no prompt. Nine months later, with the monitor unplugged, Windows is still updating the app. T+0 You connect it One cable — the only deliberate act here. T+0 Windows delivers Two LG packages signed as drivers, with no driver code inside. T+32s SYSTEM installs it No window. No EULA. Not in Programs and Features. T+9mo Still updating Monitor long gone. Windows keeps it current, as SYSTEM. 0 prompts

Removing the app is not enough: both packages stay in the driver store, wired to 51 hardware IDs, and re-arm on the next listed panel. Both layers are in the fix. Full chain and INF directives: the forensics.

Where it stands

as of
The McAfee ad Off Disabled after Microsoft stepped in, Jul 22.
The silent install Unchanged Same mechanism, same 51 hardware IDs.
LG's promise to ask first Undated Stated once, on a regional support page.

The ad was the symptom. The delivery is the story — and a promise is not a prompt. What LG actually said →

31/32
boots served the ad, in GN's test
0
consent prompts, at any point
51
hardware IDs armed to trigger it
20mo
of complaints before any ad appeared

31 of 32 boots showed the ad

Gamers Nexus, 32 consecutive boots of a $1,200 UltraGear. One boot was quiet.

Nine months after the monitor left, still being updated

Sep 30, 2025 — installed Jul 9, 2026 — still updating Oct 2025 — you unplug the monitor nine months of upkeep

Disconnecting the monitor ends nothing. The software is a resident, not a guest.

The evidence, as captured

Redacted screenshots from the machine held for verification. Send yours and we'll add them.

Reliability Monitorscreenshot slot · 16:10
The install, filed by Windows as a “Successful Windows Update” rather than an app install.
The McAfee pop-upscreenshot slot · 16:10
What the app does first: a 30-day trial offer that renews at $39.99 for year one.
pnputil /enum-driversscreenshot slot · 16:10
Both LG packages resident in the driver store — the layer an uninstall leaves behind.

The story so far

Twenty months of silent installs, three weeks of noise, then a promise nobody printed.

  1. 2024 – Jun 2026 · nobody acts
  2. First complaint on Microsoft's forum. Twenty months follow. None mention ads.
  3. On our machine: two packages at 9:52 PM, app installed 32 seconds later. Forensics →
  4. A user documents it installing with the blocking policies already enabled.
  5. Jul 2026 · the blowup
  6. The ads begin — a McAfee pop-up, twenty months into the install base. Why that date →
  7. Gamers Nexus publishes “DO NOT BUY.” The ad appears on 31 of 32 boots.
  8. This site goes live with the chain, the trigger list and the removal.
  9. Tim Sweeney tags Microsoft's Windows chief. An answer in seven hours.
  10. Windows Latest finds “Additional App – McAfee” in the Store changelog.
  11. LG denies. Microsoft announces the ad is going. Neither mentions the install. Claim by claim →
  12. McAfee references disappear from the Store listing.
  13. Aug 2026 · the quiet concession
  14. LG: it is “updating the Installer so customers can decide whether they would like to install it.” One regional support page. No coverage. Full text →
  15. The app's Store product is updated. No changelog. Contents unknown.
  16. GN's promised follow-up still unpublished, 22 days on.
  17. We re-check: permissions unchanged, 1.0 stars from 421 ratings, still no coverage.
  18. A first connection that asks — and which version does it. Reader reports settle this.

Every entry is sourced in the full report, alongside the claims we checked and chose not to publish.

Am I affected?

Three checks, no monitor required. If an affected LG panel has ever touched this PC — months ago, long gone — run them.

Check 1 · 10 seconds Installed apps

Settings → Apps → Installed apps. Search LG Monitor, then McAfee.

Either one you didn't install → hit
Check 2 · the damning one Install history

Win+R → perfmon /rel. Look for LGElectronics.LGMonitorApp.

Logged as “Successful Windows Update,” not an app install
Check 3 · for techs Driver store

pnputil /enum-drivers → look for LG Electronics .inf entries.

Present → armed, even if the app is gone
Any one of the three = affected. “I unplugged it” is not “it's clean” — the software stays behind, and so does the trigger.

Why so many machines qualified →

The fix

Two layers, both required. Remove the app and the machine still re-arms; remove the packages too and it stops.

Layer 1
The app

Settings → Apps → Installed apps → uninstall LG Monitor App. Or elevated PowerShell:

Get-AppxPackage -AllUsers LGElectronics.LGMonitorApp | Remove-AppxPackage -AllUsers
Layer 2
Both delivery packages

Elevated prompt. Find the two LG Electronics Inc. entries, then delete each by its oemXX.inf name:

pnputil /enum-drivers
pnputil /delete-driver oemXX.inf /uninstall
Half the job App removed only You plug in a listed panel It installs again. Both layers App + packages removed You plug in a listed panel Nothing arrives.

Surgical: every other device keeps its drivers and companion software, and real driver updates keep flowing. Windows Home, no Group Policy? There's a registry method — and four caveats worth reading first, including that we have not reproduced a blocked install with it. The Home method, with caveats →

19 models arm the install

Read out of the LG package resident on our machine — 51 hardware IDs, WHQL-signed, dated August 27, 2024.

34WQ73A34BQ77QC27BQ85U27UQ750 28MQ75027GR83Q27GR93U32GR93U 27UQ850V32UQ850V32GR75Q27GS85Q 32GS85Q27BA85024BR750E27UP850 24BA85024BA75027BA750

The models driving the news cycle — 34GX900A-B, 27GP83B, 27GN800, 32UN880-B — aren't in this revision. LG ships several, so the real footprint is larger than any one list. Seen one that isn't listed anywhere? Tell us.

▶ Gamers Nexus — the investigation that broke it. Watch on YouTube ↗

As reported by

Got hit? Send receipts.

Six fields and a screenshot: monitor model · Windows build · install date (Reliability Monitor) · app version · first pop-up date, or “never” · last date an LG panel was connected.

(Get-AppxPackage -AllUsers LGElectronics.LGMonitorApp).Version
Most useful right now: connect an affected LG panel to a Windows machine after August 12 and tell us whether anything asked you first. LG has promised a choice; nobody has shown one on screen. Also wanted: a packet capture of the app's traffic, and whether it reinstalls after removal.
lgspyware.com@gmail.com
Critical Error Computing Custom gaming PCs, built by humans · Humble, TX

Why a PC shop is publishing this: we build and support computers for a living. When hardware starts installing adware on our customers' machines without asking, it lands on our bench — so we tested it and published the whole chain. Reporting, not a pitch: there's nothing to buy here. More about CEC ↗