Apple Intelligence now features Image Playground, Genmoji, Writing Tools enhancements, seamless support for ChatGPT, and visual intelligence.

Apple Intelligence has also begun language expansion with localized English support for Australia, Canada, Ireland, New Zealand, South Africa, and the U.K. Learn more >

You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Malware/virus?

I was using an AI art generator and I started getting a popup notification on the side of my Mac saying that I had a virus or malware and it would lead to a website called “chabadokor” and the website would be blocked. Do I actually have a virus/malware on my Mac or is it a scam. If it is a scam, how do I get the popups to stop?

MacBook Air 13″

Posted on Aug 14, 2023 8:54 PM

Reply
Question marked as Top-ranking reply

Posted on Aug 15, 2023 8:52 AM

TheLittles wrote:
….
I. Clear The History:
Go To: History 1. Menu
Select: Clear History...1. ”
Select:all history1. ”
Click: 1. Clear History

then...

II. Clear The Cache:
Unhide: 1. The Develop Menu
Go To: 1. Develop Menu
Select:1. Empty Caches

then...

III. Clear PLIST Files in Terminal:
Go to: Applications > Utilities > Open Terminal
A. Delete the Bookmarks:
Use this command in Terminal:…

B. Reset Preferences:…
Use this command in Terminal…


All of this is unnecessary.

11 replies
Question marked as Top-ranking reply

Aug 15, 2023 8:52 AM in response to TheLittles

TheLittles wrote:
….
I. Clear The History:
Go To: History 1. Menu
Select: Clear History...1. ”
Select:all history1. ”
Click: 1. Clear History

then...

II. Clear The Cache:
Unhide: 1. The Develop Menu
Go To: 1. Develop Menu
Select:1. Empty Caches

then...

III. Clear PLIST Files in Terminal:
Go to: Applications > Utilities > Open Terminal
A. Delete the Bookmarks:
Use this command in Terminal:…

B. Reset Preferences:…
Use this command in Terminal…


All of this is unnecessary.

Aug 14, 2023 9:40 PM in response to hc0709

hc0709 Said:

"Thank you for your response. I downloaded malwarebytes and ran the diagnostic and it’s not detecting it. If you’ll look at the picture below, that it what the popup looks like. It’s under the name 'ask you'"

-------


Thank you or the photo.


Report back if this doe the trick...


Run Malwarebytes (as mentioned above).

then...

Reset Safari to Default Settings:


I. Clear The History:

  1. Go To: History Menu
  2. Select: Clear History...
  3. Select:all history
  4. Click: Clear History


then...


II. Clear The Cache:

  1. Unhide: The Develop Menu
  2. Go To: Develop Menu
  3. Select: Empty Caches


then...


III. Clear PLIST Files in Terminal:

Go to: Applications > Utilities > Open Terminal

A. Delete the Bookmarks:

Use this command in Terminal:

rm -Rf ~/Library/Safari/Bookmarks.plist


B. Reset Preferences:

Use this command in Terminal:

rm -Rf ~/Library/Preferences/com.apple.Safari.plist

Jan 14, 2024 10:08 AM in response to ngp30

ngp30 wrote:

I've just got the same after clicking on something on Facebook on my iMac - it's clever because it looks like a system generated error, but I couldn't see the "chabadokor" because it very quickly forwarded to subpeous.com which I see is a scam site. Thank you for noting chabadokor because I have now been able to put a block on pop ups from that site as McAffee and Malware are not detecting it. Very helpful, thank you!


It’s a Safari Notification that was offered and accepted. Not malware.

Here is how to disable that notification, and how to prevent other requests to provide notifications:

Stop unwanted Notifications - Apple Community


Aug 14, 2023 9:02 PM in response to hc0709

hc0709 Said:

"Malware/virus?: I was using an AI art generator and I started getting a popup notification on the side of my Mac saying that I had a virus or malware and it would lead to a website called “chabadokor” and the website would be blocked. Do I actually have a virus/malware on my Mac or is it a scam. If it is a scam, how do I get the popups to stop?"

-------


Macs Getting Viruses:

No. There is no virus on your Mac, and there never will me.


A. Keep Security Software Off of your Mac:

Any Security Software Installed?:

Security Software's just gets in the way on an Apple Device. So, uninstall it, using the uninstaller from the developer’s site. Just dragging a dropping its icon into the Trash will undesirably leave caches and other files sitting around on your Mac. So, to find the correct uninstaller to user, contact the Developer of the software.



B. Use MalwareBytes for Mac:

This is software that searches for malware/adware. So, scan with it and then remove what is found from the quarantine. Once removed, uninstall MalwareBytes for Mac. Then restart the Mac. Note that Malwarebytes is created by longtime users of these forums. So, that is why it is the only way to go about securing your Mac, when it comes through use of software 

Downloads:

  1. Malwarebytes Anti-Malware for Mac
  2. Malwarebytes uninstaller

Aug 14, 2023 9:49 PM in response to hc0709

Thar’s not malware, it’s some junk notifications you were offered and have signed up for.


The McAfee package is being advertised with some of these notifications, and McAfee have posted a good set or instructions describing how to remove the unwanted notifications. See the Safari section here, including removing the websites and then shutting off the ability of websites to ask to send notifications:

https://www.mcafee.com/support/?locale=en-US&articleId=TS102999&page=shell&shell=article-view


The built-in anti-malware works fine, and add-ons usually aren’t necessary. And since this isn’t malware, there’s nothing to remove

Aug 15, 2023 4:14 PM in response to MrHoffman

MrHoffman Said:

All of this is unnecessary.

———-


Took it as a Fell-For Scam —not a Promotional Message:

Copying from the screenshot, I got:

Gmail alert: Account has been

Your data may be stolen! Delete


I may have mistook the message. I quoted what I copied from was the screen shot into Google, and that method of troubleshooting this message seems to be mentioned quite a few times (even on these forums). Nothing in my Safari history, so not certain of the source(s).

Jan 14, 2024 10:02 AM in response to hc0709

I've just got the same after clicking on something on Facebook on my iMac - it's clever because it looks like a system generated error, but I couldn't see the "chabadokor" because it very quickly forwarded to subpeous.com which I see is a scam site. Thank you for noting chabadokor because I have now been able to put a block on pop ups from that site as McAffee and Malware are not detecting it. Very helpful, thank you!

Jan 15, 2024 2:59 AM in response to MrHoffman

Logged on this morning and got same messages again.....! Then saw this reply. Thank you so much - I didn't even have Safari open when the messages were coming up (was using Chrome) - so I had done it on Chrome, but not Safari, so I've just done the recommendations here too. Had called my own support about this and they had told me the only way was to format the hard drive and go back to factory settings!! So I'm very appreciative of your message! Thank you.

Malware/virus?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.