Plug in an LG monitor, Windows installs software you never asked for

Plug a recent LG computer monitor into a Windows PC and Windows can install LG’s companion app with no prompt. That is not a forum rumour. Microsoft documents the mechanism. LG shipped the app through it. In July 2026 the app started pushing McAfee trial ads, including on a $1,200 UltraGear that Gamers Nexus bought to test the panel.

People often lump LG TVs and monitors together. Same company, same living-room brand. The silent Windows install is a PC monitor story. LG TVs run webOS. They do not drop a Microsoft Store package onto your PC when you power them on. If a headline said “LG TVs and monitors,” the documented Windows path is the monitor.

What shows up on the PC

Connect an LG UltraGear such as the 34GX900A-B and Windows Update can pull down LG Monitor App, also listed as LG Monitor App Installer. Reliability Monitor records it as LGElectronics.LGMonitorApp. The Microsoft Store package ID is 9PM9N6F47JB8. There is no toast that says an app just landed. Microsoft’s hardware docs say that out loud: “The automatic installation feature does not provide a notification to the user when the app is installed.”

Windows Latest walked through the same trail: open Reliability Monitor with perfmon /rel and look for that package in the update history, or check Settings, Apps, Startup for LG Monitor App Installer. The Store listing is public.

This is a Windows feature, not a clever LG hack

Since Windows 8, a vendor can attach a UWP device app to hardware through device metadata. You plug the device in. Windows asks Microsoft’s metadata service what belongs with it. Drivers come from Windows Update. The Store app arrives in the background. Microsoft draws it as four steps: device connect, metadata download, driver download, app download.

Microsoft has marked device metadata deprecated. The replacement is Driver Package Container Metadata. There is still no public cutover date that ends the old path.

The same Learn page warned vendors years ago that silent installs confuse people and tank Store ratings. That warning did not change the design. Windows Latest also notes that macOS has no equivalent that lets a peripheral install App Store software when you plug it in. The channel exists because Windows ships it.

Then the ads started

The app was already arriving without asking. What lit up Reddit and YouTube in July 2026 was what it did next. A user on r/pcmasterrace posted that three UltraGear monitors led to LG Monitor App Installer through Windows Update, then a McAfee trial pop-up. Windows Latest traced the same sequence.

Gamers Nexus reproduced it on an LG UltraGear 34GX900A-B. The McAfee pop-up appeared on 31 of 32 consecutive boots. The Verge, Ars Technica, and Windows Latest all reported that test. The Verge also noted the Store page asking for permission to use all system resources and access the internet, for software the user never chose.

The Store listing and the app changelog listed McAfee as an “Additional App,” with copy for a free 30-day trial. Windows Latest quoted the changelog in full on 21 July 2026.

LG’s statement, carried by Windows Latest, is narrower than the anger online: McAfee is not installed automatically and is never installed without explicit consent. The installer is distributed through Microsoft’s official Windows process. McAfee installs only if the user proceeds. The installer, LG said, does not access, collect, or transmit customer personal data.

Hold those as two facts. The companion app can install with no user prompt. McAfee itself, on LG’s account, still needs a click. Users recorded ads they did not ask to see. That is the part Microsoft later moved on.

Microsoft called LG. The pop-up went away. The install path did not.

On 19 July 2026, Epic Games CEO Tim Sweeney replied to the thread and tagged Pavan Davuluri, Microsoft’s EVP of Windows and Devices. Davuluri said the team was looking into it. A few days later he posted that Microsoft had contacted LG, and LG had agreed to disable the McAfee pop-up.

Windows Latest published that statement on 23 July 2026. Digital Citizen covered the same intervention. The Store listing later dropped the McAfee references.

What did not get pulled: the silent install of LG Monitor App when you connect a supported display. That still sits on the device-metadata path unless you turn the path off.

This was not new in 2026

A PC repair technician posted on Microsoft’s Tech Community in July 2025. Plug an LG monitor into a client PC, get LG Monitor App Installer through Windows Update, then spend time ripping it off. They called it a potentially unwanted program. Microsoft did not close the thread with a product change.

Another Tech Community post from November 2024 asked why the LG Monitor App appeared after plugging in a new display, with no notice.

The McAfee ads were the spark. The install behaviour had already been in the wild.

How to remove it and keep it off

If the app is already there, uninstall LG Monitor App or LG Monitor App Installer from Settings, Apps, Installed apps. You can also uninstall from the Start menu. Gamers Nexus reported that removal does not need an active internet connection.

Uninstalling the app does not remove the Windows feature that put it there. If you leave the policy off, a later plug-in can bring it back. To stop Windows from fetching manufacturer apps:

• On Pro, Enterprise, or Education, open Group Policy (gpedit.msc). Go to Computer Configuration, Administrative Templates, System, Device Installation. Enable Prevent automatic download of applications associated with device metadata. Microsoft maps that policy to PreventDeviceMetadataFromNetwork under HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata.
• On Home, set that same registry value to 1, or use Device Installation Settings and answer No to automatically downloading manufacturers’ apps and custom icons.

Why this belongs on a security blog

We do security work for Canadian teams. A display that paints pixels does not need a Store app with internet access and a trial funnel. When the operating system installs that app with no prompt, a normal hardware purchase has become a software supply-chain event.

Microsoft designed the channel. LG used it. McAfee paid to ride along until the pop-up got too public. The pop-up is the part that got switched off in a few days. The channel is still there for the next vendor.

If you buy hardware for an office, treat companion apps as untrusted until you decide you want them. Block the metadata app download on the image you deploy. After you plug in a new display, check Reliability Monitor.

This article is general information, not security advice for a specific network or incident.