When McAfee security is installed on a PC (or comes pre-installed on a PC), a McAfee webadvisor extension is automatically injected into Chrome and activated.

When this extension is removed, WebAdvisor appears to continue to work, and triggers a Chrome notification each time a file is downloaded. In reality, an overlay is placed over the Chrome browser that attempts to match its location and size, intentionally misleading the user into thinking they are interacting with Chrome when in reality, it is an overlay applied over the browser, styled, rendered, and positioned so as to trick the user into thinking this is a native part of the Chrome browser when it is most definitely not.

In a continued attempt to deceive the user into thinking the plugin is a part of Chrome, the overlay attempts (poorly) to follow the browser around the desktop, mimicking the size and location of the browser window.

See a recording of this here: https://www.youtube.com/watch?v=x_wBwXYjEy8&feature=youtu.be