A phishing scam has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus. The user is then offered Mac Defender 'anti-virus' software to solve the issue.
This 'anti-virus' software is malware (i.e. malicious software). Its ultimate goal is to get the user's credit card information which may be used for fraudulent purposes.
The most common names for this malware are MacDefender, MacProtector and MacSecurity.
Download Antivirus One - Virus Cleaner for macOS 10.12 or later and enjoy it on your Mac. Keep your digital wallets and keychains safe with Antivirus One, your personal cyber security expert. Antivirus One offers live antivirus monitoring to protect your Mac from adware, ransomware, spyware and all kinds of malware attacks. Learn how to avoid or remove Mac Defender malware in Mac OS X v10.6 or earlier. A phishing scam has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus.
Apple released a free software update (Security Update 2011-003) that will automatically find and remove Mac Defender malware and its known variants.
The Resolution section below also provides step-by-step instructions on how to avoid or manually remove this malware.
Resolution
How to avoid installing this malware
If any notifications about viruses or security software appear, quit Safari or any other browser that you are using. If a normal attempt at quitting the browser doesn't work, then Force Quit the browser.
Adb composite driver for mac. In some cases, your browser may automatically download and launch the installer for this malicious software. If this happens, cancel the installation process; do not enter your administrator password. Delete the installer immediately using the steps below.
- Go into the Downloads folder, or your preferred download location.
- Drag the installer to the Trash.
- Empty the Trash.
How to remove this malware
If the malware has been installed, we recommend the following actions:
- Do not provide your credit card information under any circumstances.
- Use the Removal Steps below.
Removal steps
- Move or close the Scan Window.
- Go to the Utilities folder in the Applications folder and launch Activity Monitor.
- Choose All Processes from the pop up menu in the upper right corner of the window.
- Under the Process Name column, look for the name of the app and click to select it; common app names include: MacDefender, MacSecurity or MacProtector.
- Click the Quit Process button in the upper left corner of the window and select Quit.
- Quit Activity Monitor application.
- Open the Applications folder.
- Locate the app ex. MacDefender, MacSecurity, MacProtector or other name.
- Drag to Trash, and empty Trash.
Malware also installs a login item in your account in System Preferences. Removal of the login item is not necessary, but you can remove it by following the steps below.
- Open System Preferences, select Accounts, then Login Items
- Select the name of the app you removed in the steps above ex. MacDefender, MacSecurity, MacProtector
- Click the minus button
Elmedia player pro 6 9 – multi format media player. Use the steps in the 'How to avoid installing this malware' section above to remove the installer from the download location.
Note: Apple provides security updates for the Mac exclusively through Software Update and the Apple Support Downloads site. User should exercise caution any time they are asked to enter sensitive personal information online.
How to remove 'VIRUS ALERT FROM APPLE' from Mac?
What is 'VIRUS ALERT FROM APPLE'?
'VIRUS ALERT TO APPLE' is another fake error message delivered by various rogue websites. As a rule, users visit these sites inadvertently - they are redirected by unwanted applications (PUAs) or intrusive advertisements displayed on other deceptive sites. Research shows that unwanted apps typically infiltrate systems without permission and, as well as causing redirects, deliver rogue ads and gather information relating to browsing activity.
This error message states that the system has been blocked due to the following reasons: the Mac registration key is illegal; pirated software being is used; the computer is proliferating viruses; the system is hacked or being used from an undefined location. The rogue site is also designed to automatically download a file called 'This is a VIRUS.You computer is blocked'. The file is continually re-downloaded the entire time users visit the website. Fortunately, this file is harmless and you can delete it without worrying. The error message encourages users to contact Apple's tech support via a telephone number ('+86672265620') provided. 'Certified technicians' then supposedly resolve all issues. Be aware, however, that the 'VIRUS ALERT TO APPLE' error is fake and Apple is certainly not involved in this scam. Cyber criminals generate revenue by scaring and tricking gullible users into calling the aforementioned telephone number and paying for services that are not needed. Therefore, ignore 'VIRUS ALERT TO APPLE' and never attempt to call the aforementioned telephone number. You can remove this error simply by leaving the deceptive site. Note that some rogue sites employ scripts that disable closing of browsing tabs/windows. In these cases, terminate the browser using Activity Monitor or simply reboot the system. Do not restore previous browsing session, otherwise malicious sites are reopened.
Potentially unwanted applications gather various information about browsing activity. The list of collected data types typically includes (but is not limited to) keystrokes, URLs visited, pages viewed, search queries, Internet Protocol (IP) addresses, and geo-locations. Recorded data usually contains personal information that is shared with third parties and misused to generate revenue. Therefore, having) that enable placement of third party graphical content on any visited site. Therefore, they conceal underlying content, thereby significantly diminishing the browsing experience. In addition, intrusive ads redirect to malicious websites and run scripts that download/install unwanted apps (or even high-risk viruses). Clicking them is risky and can result in computer infections. All potentially unwanted applications should be uninstalled immediately.
| Name | 'VIRUS ALERT FROM APPLE' virus |
| Threat Type | Scam, Mac malware, Mac virus |
| Related Domains | jungmong[.]cf |
| Serving IP Address (jungmong[.]cf) | 167.99.234.72 |
| Detection Names (jungmong[.]cf) | BitDefender (Malware), Fortinet (Phishing), Kaspersky (Malware), Full List (VirusTotal) |
| Symptoms | Your Mac became slower than normal, you see unwanted pop-up ads, you get redirected to shady websites. |
| Distribution methods | Deceptive pop-up ads, free software installers (bundling), fake flash player installers, torrent file downloads. |
| Damage | Internet browsing tracking (potential privacy issues), displaying of unwanted ads, redirects to shady websites, loss of private information. |
| Malware Removal (Mac) | To eliminate possible malware infections, scan your Mac with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. |
Many fake errors are virtually identical to 'VIRUS ALERT FROM APPLE' including, for example, 'Your Computer Is Permanently Blocked', 'Your Registration Key Is Blocked', 'Your Mac Might Be Infected!', 'The Removal Of (3) Spyware Is Required', and so on. They claim that the system is damaged (e.g., infected, missing files, or similar), however, errors such as 'VIRUS ALERT TO APPLE' are designed only to extort money from unsuspecting users. Potentially unwanted applications also share many similarities. By offering 'useful features', they attempt to give the impression of legitimacy and trick users to install, however, unwanted apps typically have just one purpose: to generate revenue for the developers. Most cause unwanted redirects, gather sensitive information, and deliver intrusive ads, thereby diminishing the browsing experience and posing direct threat to your privacy and browsing safety.
How did potentially unwanted applications install on my computer?
In some cases, potentially unwanted applications have official download websites, however, as mentioned above, most infiltrate systems without permission. Developers proliferate them via the aforementioned intrusive ads and a deceptive marketing method called 'bundling' - stealth installation of unwanted apps together with regular software. Developers are not honest enough to disclose installation of unwanted apps properly, and thus most are concealed within various sections (most likely 'Custom' or 'Advanced' settings) of the download/installation processes. Furthermore, many users click advertisements and skip download/installation steps - behavior that often leads to inadvertent installation of unwanted apps. In this way, they expose their systems to risk of various infections and compromise their privacy.
How to avoid installation of potentially unwanted applications?
User are often responsible for system infections - lack of knowledge and careless behavior leads to problems. Caution is the key to computer safety. To prevent unwanted installations, be very cautious when browsing the internet and downloading/installing software. Carefully analyze each step of the download/installation processes and cancel offers to download/install additional applications. Opt-out of third party software and decline offers to download/install them. We recommend that you avoid using third party downloaders, since developers monetize them by promoting rogue software. Software should be downloaded from official sources only, using direct download links. Intrusive ads often seem legitimate, but they often redirect to dubious websites (gambling, pornography, and so on). If you experience these ads, check the list of installed programs/browser plug-ins and eliminate any suspicious entries. If your computer is already infected with PUAs, we recommend running a scan with Combo Cleaner Antivirus for macOS to automatically eliminate the.
Text presented within 'VIRUS ALERT FROM APPLE' pop-up:
VIRUS ALERT FROM APPLE
This computer is BLOCKED
Do not close this window and restart your computer
Your computer's registration key is Blocked.
Why we blocked your computer?
The mac's registration key is illegal.
This mac is using pirated software.
This mac is sending virus over the internet.
This mac is hacked or used from undefined location.
We block this computer for your security.
Contact apple helpline to reactivate your computer.
BLOCKED
Apple Support Alert
Your System Detected Some unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +86672265620
Appearance of 'VIRUS ALERT FROM APPLE' scam (GIF):
'VIRUS ALERT FROM APPLE' pop-up-displaying websites continually download a file called 'This is a VIRUS.You computer is blocked':
Another variant of 'VIRUS ALERT FROM APPLE' pop-up scam (the text in pop-up slightly differs and cyber criminals use different telephone number):
Text presented in the pop-up:
VIRUS ALERT FROM APPLE
This Mac computer is BLOCKED
Do not close this warning or restart your Mac
Why we blocked your Mac Computer?
The Mac's registration key is illegal.
This Mac is using pirated software.
This Mac is sending virus over the Internet.
This Mac is hacked or used from undefined location.
We block this Mac for your security.
Contact Apple helpline to reactivate your Mac.
Text presented in the background:
Apple Support Alert
Your System Detected Some Unusual Activity.
It might harm your Mac's data and track your financial activities.
Please report this activity to +1-855-550-6155
Appearance of this 'VIRUS ALERT FROM APPLE' pop-up scam variant (GIF):
Another variant of 'VIRUS ALERT FROM APPLE' pop-up scam:
Text presented within this site:
Pop-up window:
VIRUS ALERT FROM APPLE
This computer is BLOCKED
The window's registration key is illegal.
This window is using pirated software.
This window is sending virus over the internet
This window is hacked or used from undefined location.
We block this computer for your security.
Contact Apple helpline to reactivate your computer.
Back to Safety
Website background:
Apple Support
Apple Security Tollfree:
+1-888-834-8756
Prevent this page from creating additional dialogues.
Enter Apple registration key to unblock.
Enter key
Apple Support Alert
Your System Detect Some Unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +1-888-834-8756
Upgrade mac software. Yet another variant of 'VIRUS ALERT FROM APPLE' pop-up scam:
Text presented within:
Main pop-up:
Apple protected your PC
Apple SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk. For technical support call on +1-(888)-341-9847.
Publisher: Unknown Publisher
App: Apple.app
Run anyway [Don't run]
Background pop-up:
VIRUS ALERT FROM APPLE
This Mac computer is BLOCKED
Do not close this warning or restart your Mac
Your Mac's registration key is Blocked.
Why we blocked your Mac Computer?
The Mac's registration key is illegal.
This Mac is using pirated software.
This Mac is sending virus over the internet.
This Mac is hacked or used from undefined location.
We block this Mac for your security.
Contact Apple helpline to reactivate your Mac.
Apple Security Tollfree: +1-(888)-341-9847
Background:
Apple Support Alert
Your System Detected Some Unusual Activity.
It might harm your computer data and track your financial activities.
Pleases report this activity to +1-(888)-341-9847
Ignore Alert Chat Now
Yet another variant of 'VIRUS ALERT FROM APPLE' pop-up scam:
Text presented within:
Pop-up window:
VIRUS ALERT FROM APPLE
This computer is BLOCKED
Do not close this window and restart your computer
Your computer's registration key is Blocked.
Why we blocked your computer?
The window's registration key is illegal.
This window is using pirated software.
This window is sending virus over the internet.
This window is hacked or used from undefined location.
We block this computer for your security.
Contact Apple helpline to reactivate your computer.
Apple Security Tollfree:
+1-888-307-3210
Background:
Apple Security Tollfree:
+1-888-307-3210
Enter Apple Serial key to unblock.
ENTER KEY: [Submit]
Apple Support Alert
Your System Detected Some Unusual Activity.
It might harm your computer data and track your financial activities.
Pleases report this activity to +1-888-307-3210
Ignore Alert Chat Now
Instant automatic Mac malware removal:Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of Mac malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner for MacBy downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
Private browser website. Quick menu:
- STEP 1. Remove PUA related files and folders from OSX.
- STEP 2. Remove rogue extensions from Safari.
- STEP 3. Remove rogue add-ons from Google Chrome.
- STEP 4. Remove potentially unwanted plug-ins from Mozilla Firefox.
Video showing how to remove rogue applications that display 'VIRUS ALERT FROM APPLE' pop-up using Combo Cleaner:
Potentially unwanted applications removal:
Remove potentially unwanted applications from your 'Applications' folder:
Click the Finder icon. In the Finder window, select 'Applications'. In the applications folder, look for 'MPlayerX','NicePlayer', or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.
Combo Cleaner checks if your computer is infected with malware. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
Remove 'virus alert from apple' virus related files and folders:
Click the Finder icon, from the menu bar. Apple mac antivirus online scanner. Choose Go, and click Go to Folder.
Check for adware-generated files in the /Library/LaunchAgents folder:
In the Go to Folder. bar, type: /Library/LaunchAgents
In the 'LaunchAgents' folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - 'installmac.AppRemoval.plist', 'myppes.download.plist', 'mykotlerino.ltvbit.plist', 'kuklorest.update.plist', etc. Adware commonly installs several files with the same string.
Check for adware generated files in the /Library/Application Support folder:
In the Go to Folder. bar, type: /Library/Application Support
In the 'Application Support' folder, look for any recently-added suspicious folders. For example, 'MplayerX' or 'NicePlayer', and move these folders to the Trash.
Check for adware-generated files in the ~/Library/LaunchAgents folder:
In the Go to Folder bar, type: ~/Library/LaunchAgents
In the 'LaunchAgents' folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - 'installmac.AppRemoval.plist', 'myppes.download.plist', 'mykotlerino.ltvbit.plist', 'kuklorest.update.plist', etc. Adware commonly installs several files with the same string.
Check for adware-generated files in the /Library/LaunchDaemons folder:
In the Go to Folder. bar, type: /Library/LaunchDaemons
In the 'LaunchDaemons' folder, look for recently-added suspicious files. For example 'com.aoudad.net-preferences.plist', 'com.myppes.net-preferences.plist', 'com.kuklorest.net-preferences.plist', 'com.avickUpd.plist', etc., and move them to the Trash.
Scan your Mac with Combo Cleaner:
If you have followed all the steps in the correct order you Mac should be clean of infections. To be sure your system is not infected run a scan with Combo Cleaner Antivirus. Download it HERE. After downloading the file double click combocleaner.dmg installer, in the opened window drag and drop Combo Cleaner icon on top of the Applications icon. Now open your launchpad and click on the Combo Cleaner icon. Wait until Combo Cleaner updates it's virus definition database and click 'Start Combo Scan' button.
Combo Cleaner will scan your Mac for malware infections. If the antivirus scan displays 'no threats found' - this means that you can continue with the removal guide, otherwise it's recommended to remove any found infections before continuing.
After removing files and folders generated by the adware, continue to remove rogue extensions from your Internet browsers.
'VIRUS ALERT FROM APPLE' virus removal from Internet browsers:
Remove malicious extensions from Safari:
Remove 'virus alert from apple' virus related Safari extensions:
Justbroadcaster for facebook 2 0 – video streaming for facebook. Open Safari browser, from the menu bar, select 'Safari' and click 'Preferences.'.
In the preferences window, select 'Extensions' and look for any recently-installed suspicious extensions. When located, click the 'Uninstall' button next to it/them. Note that you can safely uninstall all extensions from your Safari browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Safari.
Remove malicious plug-ins from Mozilla Firefox:
Remove 'virus alert from apple' virus related Mozilla Firefox add-ons:
Apple Virus Scan Software
Open your Mozilla Firefox browser. At the top right corner of the screen, click the 'Open Menu' (three horizontal lines) button. From the opened menu, choose 'Add-ons'.
Free Online Apple Virus Scan
Choose the 'Extensions' tab and look for any recently-installed suspicious add-ons. When located, click the 'Remove' button next to it/them. Note that you can safely uninstall all extensions from your Mozilla Firefox browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Mozilla Firefox.
Remove malicious extensions from Google Chrome:
Remove 'virus alert from apple' virus related Google Chrome add-ons:
Open Google Chrome and click the 'Chrome menu' (three horizontal lines) button located in the top-right corner of the browser window. From the drop-down menu, choose 'More Tools' and select 'Extensions'.
In the 'Extensions' window, look for any recently-installed suspicious add-ons. When located, click the 'Trash' button next to it/them. Note that you can safely uninstall all extensions from your Google Chrome browser - none are crucial for normal browser operation.
Apple Virus Scan
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Google Chrome.
