JustPush.biz is a browser-based notification spam operation that exploits the legitimate web push notification feature built into modern browsers. Once users are tricked into clicking "Allow" on a deceptive permission prompt, this site gains the ability to bombard them with intrusive advertisements, fraudulent alerts, and links to potentially dangerous websites—even when the browser is closed. Unlike traditional malware that infects system files, JustPush.biz operates through browser permissions, making it particularly insidious because many users don't realize they've granted access to what amounts to an advertising firehose pointed directly at their desktop.
What makes notification spam operations like JustPush.biz especially problematic is their ability to redirect victims to scam pages, fake tech support sites, phishing operations, and pages hosting actual malware downloads. The notifications themselves often mimic legitimate system warnings or security alerts, preying on users' concerns about their computer's safety. While the permission itself doesn't execute code on your system like traditional malware, it creates a persistent annoyance and security risk that requires deliberate action to remove.
Threat Profile
| Attribute | Details |
|---|---|
| Threat Type | Browser notification spam, push notification abuse, adware delivery network |
| Distribution Method | Deceptive permission prompts, social engineering, bundled with freeware/adware |
| Affected Platforms | Windows, macOS, Linux (any OS with Chrome, Firefox, Edge, Safari, Opera) |
| Primary Risk | Exposure to scams, phishing sites, fake tech support, malware download pages |
| Persistence Method | Browser notification permissions (stored in browser profile data) |
| System-Level Infection | None directly—operates through browser API; may be delivered by adware/PUPs |
| Common Notification Content | Fake virus warnings, prize scams, clickbait news, adult content, fake updates |
| Associated Domains | Justpush.biz, various numbered subdomains (s1.justpush.biz, s2.justpush.biz, etc.) |
| Data Collection | Typical for advertising networks: browser type, OS, geolocation, click behavior |
| Removal Difficulty | Easy to moderate—browser settings accessible to most users; complicated by companion adware |
| Revenue Model | Pay-per-click advertising, affiliate scams, traffic redirection |
| Reinfection Risk | High if underlying adware/PUP not removed; users may re-grant permission unknowingly |
How It Spreads
JustPush.biz doesn't spread like a traditional virus or worm—you don't "catch" it from an infected file. Instead, users are socially engineered into granting permission for the site to send notifications. The most common scenario involves landing on a webpage (often after clicking a misleading ad or visiting a shady streaming site) that displays a fake CAPTCHA, a "Click Allow to prove you're not a robot" message, or a fabricated video player prompt claiming you need to enable notifications to watch content. These deceptive prompts are designed to look like legitimate website functions, but clicking "Allow" grants JustPush.biz notification permissions in your browser.
In many cases, users arrive at JustPush.biz through a chain of redirects orchestrated by adware or potentially unwanted programs (PUPs) already installed on their computer. These programs—often bundled with free software downloads, pirated content installers, or fake Flash Player updates—modify browser settings and inject ads into web pages. One of their functions is to redirect users to notification spam operations like JustPush.biz, creating a revenue stream for the adware operators through affiliate partnerships.
Common distribution vectors include:
- Deceptive permission prompts disguised as video player controls, CAPTCHA verification, download buttons, or age confirmation dialogs
- Software bundling where free applications include optional (often pre-checked) adware components that facilitate redirects to notification spam sites
- Malicious advertising on legitimate websites where compromised ad networks serve redirects to push notification scam pages
- Torrent and streaming sites that use aggressive monetization tactics including forced redirects to permission-request pages
- Fake software updates particularly fraudulent Flash Player, browser, or media codec installers that include adware payloads
- Search engine poisoning where scam sites rank for popular search terms and immediately prompt for notification permissions
- Email spam links directing to landing pages designed solely to harvest notification permissions from as many visitors as possible
What It Does On Your Machine
Once you've granted permission, JustPush.biz gains the ability to send browser notifications to your desktop at any time—even when you're not actively browsing the site or when your browser appears to be closed (as long as the browser process is running in the background, which is default behavior for Chrome and Edge). These notifications appear in the same format as legitimate alerts from trusted websites: pop-ups in the corner of your screen with a title, message, and often an image designed to grab attention. The content is almost universally misleading or outright fraudulent.
The notifications typically fall into several categories of scams. Fake security alerts claim your computer is infected with viruses and urge you to call a "tech support" number or download a "security tool" (which is actually malware). Prize scams announce you've won an iPhone, gift card, or vacation, leading to phishing pages that harvest personal information or credit card details for "shipping fees." Clickbait news uses sensational headlines to drive traffic to ad-laden websites that generate revenue for the operators. Adult content notifications attempt to lure users to sketchy sites that may contain malvertising or attempt to extract payment information. Fake software update alerts mimic legitimate Windows or browser update notices, leading to downloads of potentially unwanted programs or actual malware.
The business model behind JustPush.biz is straightforward: operators get paid for every click on the notifications they deliver, creating an incentive to send as many as possible and make them as attention-grabbing as necessary. They don't care if you fall for the scam—they're paid just for the click. This means you might see dozens of notifications per day if you've granted permission to an aggressive operator. The psychological impact shouldn't be underestimated either; constant interruption from what appear to be system-level alerts creates anxiety and erodes your ability to distinguish legitimate warnings from spam.
While JustPush.biz itself doesn't create system files or registry entries like traditional malware, it's frequently accompanied by actual adware that does. If you're seeing JustPush.biz notifications, there's a reasonable chance you also have a potentially unwanted program running on your system that's facilitating the redirects and may be causing additional symptoms like homepage changes, new toolbars, slowdown from resource-intensive ad injection, or redirected search results. Here's what you might find in your system if adware delivered you to JustPush.biz:
Manual Removal — Step by Step
Revoke Notification Permissions in Your Browser
This is the critical first step. In Chrome/Edge: Go to Settings → Privacy and security → Site settings → Notifications, find JustPush.biz (and any numbered subdomains like s1.justpush.biz) in the "Allowed" list, click the three dots, and select Remove. In Firefox: Settings → Privacy & Security → Permissions section → Notifications → Settings button, find JustPush.biz, set to "Block" or Remove, then Save Changes. In Safari (Mac): Safari menu → Settings → Websites → Notifications, select JustPush.biz and click Remove. Do this for every browser installed on your computer.
Check for Suspicious Browser Extensions
Open your browser's extensions/add-ons manager (chrome://extensions in Chrome/Edge, about:addons in Firefox) and carefully review every installed extension. Look for anything you don't remember installing, extensions with generic names, or those requiring excessive permissions. Remove any suspicious extensions—you can always reinstall legitimate ones later if needed. Don't just disable them; fully uninstall to prevent reactivation.
Review and Reset Browser Settings
Check your homepage and default search engine settings in each browser. If they've been changed to unfamiliar search providers or landing pages, reset them to your preferred settings. In Chrome/Edge, you can also check for "Managed by your organization" in settings—if you see this on a personal computer, it indicates policy-based hijacking that may require additional removal steps. Consider using the browser's reset function (Settings → Reset settings → Restore settings to their original defaults), but note this will clear extensions and pinned tabs.
Uninstall Suspicious Programs via Windows Settings
Open Settings → Apps → Installed apps (or Control Panel → Programs and Features on older Windows) and sort by install date. Look for programs installed around the time you started seeing JustPush.biz notifications. Uninstall anything unfamiliar, especially programs with generic names, those from unknown publishers, or anything related to "PC optimization," "driver updates," or "video downloaders." Common culprits have names like DealPly, MyWebSearch, Conduit, or variations with random characters.
Check Startup Programs and Scheduled Tasks
Press Ctrl+Shift+Esc to open Task Manager, click the Startup tab, and disable any unfamiliar entries (right-click → Disable). Then open Task Scheduler (search for it in Start menu), expand Task Scheduler Library, and look through the tasks for anything suspicious—particularly tasks that run programs from %LOCALAPPDATA%, %APPDATA%, or %TEMP% folders with random-looking names. Right-click suspicious tasks and Delete them. Be cautious not to remove legitimate Windows or application tasks.
Scan with Malwarebytes or Similar Reputable Tool
Download Malwarebytes Free from the official website (malwarebytes.com) and run a full Threat Scan. This will catch adware, PUPs, and browser hijackers that manual removal might miss. Follow the prompts to quarantine and remove everything it finds. Other good options include AdwCleaner (from Malwarebytes) specifically designed for adware, or HitmanPro for a second opinion. Avoid "free PC cleaners" that promise to fix everything—many are PUPs themselves.
Clear Browser Cache and Cookies
After removing permissions and suspicious extensions, clear your browser's cache and cookies to eliminate any tracking data or stored scripts associated with JustPush.biz and related adware. In most browsers, you can access this through Settings → Privacy → Clear browsing data, selecting "All time" as the time range and checking Cookies and Cache. This ensures a clean slate and can resolve lingering redirect issues.
Reboot and Monitor for 24-48 Hours
Restart your computer fully and monitor for recurring notifications or other symptoms over the next day or two. Open your browser and verify that notifications are no longer appearing. Check that your homepage and search settings remain as you set them. If notifications return or new redirects appear, you likely have additional adware components that need removal, or permissions were re-granted inadvertently. Don't re-grant notification permissions to any unfamiliar sites, no matter how the prompt is disguised.
Update Your Security Practices
Once cleaned, take preventive measures: ensure Windows Defender (or your chosen antivirus) is active and updated, enable browser-based pop-up blocking in settings, consider installing an ad blocker extension like uBlock Origin to reduce exposure to malicious advertising, and be extremely cautious about clicking "Allow" on any notification permission request unless you absolutely trust the site and understand why it needs that permission.
Prevention
- Never click "Allow" on notification prompts unless you trust the site completely. Legitimate websites will function fine without notification permissions. If a site claims you must enable notifications to view content, leave—it's a scam. The only sites that genuinely benefit from notification permissions are ones you actively want updates from (news sites you read regularly, webmail, etc.).
- Download software only from official sources. Avoid third-party download sites, torrent repositories for commercial software, and "free" versions of paid programs. These are the primary distribution channels for bundled adware. When installing legitimate free software, always choose Custom/Advanced installation and uncheck any optional offers or toolbars.
- Keep your browser and operating system updated. Browser updates often include improvements to permission prompts and warnings for deceptive practices. Modern browsers are getting better at flagging suspicious notification requests, but they can only help if you're running current versions.
- Use an ad blocker and script blocker. Extensions like uBlock Origin block the advertising networks that fund and distribute these scams. Script blockers can prevent automatic redirects that lead to permission-request pages. This creates a protective layer before you even encounter the social engineering attempt.
- Review browser permissions quarterly. Make it a habit to check Settings → Site Settings → Notifications every few months and remove permissions for sites you no longer use or don't recognize. Permissions accumulate over time, and even legitimately-granted permissions can be exploited if a site is later compromised.
- Be skeptical of urgent warnings and too-good-to-be-true offers. The notifications from JustPush.biz are designed to create urgency ("Your computer is infected NOW!") or greed ("You've won!"). Legitimate security warnings come from your antivirus software or Windows Security, not from browser notifications with click-here links.
- Educate everyone who uses your computer. Family members, employees, or anyone with access to your machine can grant permissions that affect all users. Make sure they understand the risks and know not to click "Allow" on unfamiliar sites.
- Run periodic scans even when nothing seems wrong. Monthly scans with Malwarebytes or Windows Defender can catch adware in early stages before it becomes intrusive. Many PUPs run quietly in the background for weeks before manifesting obvious symptoms, and early detection is always easier to clean.
When Computer Repair Roswell removes JustPush.biz and associated adware from your system, we guarantee our work for 90 days. If the notifications return or related symptoms reappear within that period, bring it back—we'll re-clean it at no charge. We don't just revoke permissions; we hunt down the delivery mechanism to prevent reinfection.
Bring It In
If you've followed the steps above and still see JustPush.biz notifications, or if you're uncomfortable performing manual removal, we're here to help. Browser hijackers and notification spam often travel with companions—rootkits, trojans, or persistent adware that regenerates what you remove. Our technicians use professional-grade tools and systematic removal protocols to ensure complete cleaning, not just surface-level fixes. We'll also verify that your system hasn't been compromised in other ways (keyloggers, password theft, etc.) that often accompany adware infections.
Computer Repair Roswell is located right here in Roswell, Georgia, and we handle same-day malware removal for most infections. Call us at (770) 299-3649 or stop by our shop. We'll give you an honest assessment—if it's something simple you can handle yourself with a few minutes of guidance, we'll walk you through it over the phone at no charge. If it requires deeper cleaning or you'd rather have professionals handle it completely, we'll quote you a flat-rate price before starting any work. No surprises, no upsells for things you don't need. Just clean machines and straightforward service from people who've been doing this in the Roswell community for years.