LG monitors are smuggling in ad launchers.

LG monitors have been found to automatically install a promotional app that displays intrusive advertisements on Windows PCs, according to reports from German tech news outlet heise online. The issue affects some systems in the United States, where users report unwanted ads appearing prominently at the bottom right corner of their screens after each startup. These ads typically promote McAfee antivirus software, though other LG applications related to display calibration have also been observed. The app in question, called “LG Monitor App Installer,” is downloaded silently via Windows Update and added to the system’s autostart settings. It uses device IDs to identify compatible additional software and installs it without user consent. This particular version of the app has been available since 2023, with complaints about its behavior increasing since July 2026, coinciding with an update released on June 29, 2026. A YouTube channel named Gamers Nexus conducted a test by ordering a new LG monitor and connecting it to a Windows PC. The Windows Update log confirmed that drivers were updated first, followed by the automatic download of the app. Another instance involved a three-year-old LG monitor, which installed the app without prompting the user. So far, no such cases have been reported in Europe. What makes this situation particularly concerning is the level of access granted to the app. Unlike many apps built on the universal Windows Platform (UWP), which operate within a sandboxed environment, this app runs with the same permissions as a manually installed Win32 application. It can access all files, peripheral devices, and system settings without notification, including location data and diagnostic features usually restricted to store apps. According to Microsoft's documentation on app permissions, the app can modify system settings, access hardware components, and even alter user preferences without explicit approval. While the company notes that these capabilities may not always be used, the potential for misuse raises alarms. Some experts suggest that these extensive permissions might stem from the app being developed using the Electron framework, although LG does not appear to actively exploit them. Several well-known apps from the Microsoft Store, such as WhatsApp, ChatGPT, iTunes, Spotify, Firefox, Edge, and Teams, also request similar broad permissions. However, users generally choose to install these apps knowingly, often after reviewing permission requests. In contrast, Win32 programs, which are often distributed as .exe files, already bypass such restrictions unless explicitly blocked by user rights. Users affected by the automatic installation of the app have suggested solutions through local group policy editors. By searching for “gpedit” in the Start menu and navigating to the appropriate settings under Computer Configuration, administrators can disable the automatic downloading of apps tied to device metadata. This method allows users to regain control over software installations on their systems.