Safari Virus with MacBook Pro

Intermittently, but for the past week, I get a pop-up saying that Apple wants to make changes and requests my password. After hitting cancel at least twice, Safari and an app launch. Immediately a new pop-up stating "installation complete" appears and the only choice is to hit "ok" (I do not.) Usually, I have to restart the computer because my mouse won't function. After restarting, I "force quit" both safari and the green icon with a white magnifying glass which is named ProductEvent.app and ProcessSave.app. I put both of these in my trash and remove it. But this is an endless cycle. Anyone know if this is a virus? I almost NEVER use Safari (sorry Apple), so I don't think this was an app I ever downloaded. It appears to be the same virus this user experienced: https://discussions.apple.com/thread/250209015 though the name of the app was different.

Posted on Oct 1, 2019 1:25 PM

Top-ranking reply

Eric Root

Level 10

685,221 points

Posted on Oct 1, 2019 1:34 PM

You may have adware/malware installed. Try downloading this program which was written by Thomas R, a long time poster. The program will search for malware/adware. The program will do the work for you which makes it easy. It may be necessary to run more than one scan. After running the scans, restart the computer.

Malwarebytes Anti-Malware for Mac 10.10 and later

Malwarebytes uninstall

View in context

Similar questions

19 replies

Jan 29, 2020 3:20 PM in response to Eric Root

Thank you! It worked for me as well

gracecar

Level 1

4 points

Mar 8, 2020 3:55 PM in response to LeeFox1

I have a similar issue. While using Safari, the program will suddenly freeze up then close. I will receive a separate popup stating "Apple wants to make changes" and asks for my password. It requires a "cancel" response three times. Then Safari automatically reopens. Approximately 10% of the time there is a new Safari extension that installed without my approval - noticed only if I open Safari preferences. I typically manually uninstall the program from the Application page and delete the associated folders.

The extension logo is always a green icon with magnifying glass. Names listed below.

- Platform Air 1.0
- Platform Air
- SmarterHD
- TaskSite
- OnlyApplication
- OnlyApplication 1.0
- SystemJump 1.0
- ProcessFresh 1.0
- MultiDetail
- EngineCache 1.0

I just downloaded Malwarebytes. Its scanner detected both adware and malware that are now quarantined. Hopefully that will do the trick. Thank you guys - specifically Eric Root!

kmcrea

Level 1

4 points

Oct 24, 2019 8:52 PM in response to kmcrea

Update: Listen to Eric and download that application. It found where the bad files were hidden and deleted. Thanks Eric!

Nov 2, 2019 3:46 PM in response to LeeFox1

The link states that the user was being careless and downloaded some fake plugin. You are probably experiencing the same virus in a different way

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari Virus with MacBook Pro