Possible hack on my iMac and EtreCheck problem

After visiting Facebook I got a warning that I had visited a bad site and should do a scan. I don't have antivirus software so I tried running EtreCheck. I got a warning that I'm running EtreCheck on a beta version of MacOS. My OS is up to date (15.7.3) so I don't understand the warning.

Since then I get two different regular pop-ups that say Apple security system: hack detected. update-macosx.com Click to enable protection and

McAfee: OS is at Risk. update-macosx.com Click to perform a scan

I've never subscribed to McAfee.

What should I do?

iMac, macOS 10.12

Posted on Jan 11, 2026 4:42 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 11, 2026 11:49 AM

There is a significant likelihood that you used Google to search for EtreCheck, and that you downloaded either an outdated version of it or one that has been maliciously altered. Given the resulting (fraudulent) "warnings" you encountered after using it, the latter is more likely.


Definitely follow the others' instructions for ridding your Mac of the bogus "warnings" but you will want to confirm no other potentially malicious alterations have occurred.


Do not use Google. It is by far the #1 source for Mac malware.


Whatever you downloaded, drag its app icon to the Trash. Then, download EtreCheck using the link on its legitimate home page: https://etresoft.com/en/index.html


Run the app and post its report in a reply to this Discussion. It will reveal the presence of any additional unwanted system alterations.


Instructions for posting that report are here: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community

6 replies
Question marked as Top-ranking reply

Jan 11, 2026 11:49 AM in response to willjm

There is a significant likelihood that you used Google to search for EtreCheck, and that you downloaded either an outdated version of it or one that has been maliciously altered. Given the resulting (fraudulent) "warnings" you encountered after using it, the latter is more likely.


Definitely follow the others' instructions for ridding your Mac of the bogus "warnings" but you will want to confirm no other potentially malicious alterations have occurred.


Do not use Google. It is by far the #1 source for Mac malware.


Whatever you downloaded, drag its app icon to the Trash. Then, download EtreCheck using the link on its legitimate home page: https://etresoft.com/en/index.html


Run the app and post its report in a reply to this Discussion. It will reveal the presence of any additional unwanted system alterations.


Instructions for posting that report are here: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community

Jan 11, 2026 12:08 PM in response to willjm

While I agree that posting the EtreCheck report using the latest version may be useful, I do have to ask if the messages you are seeing are in the upper right corner of your screen seen as Notifications?


If so, that is just because you have allowed a website to send you those nefarious notifications and all you need to do is go to Safari > Settings > Websites > Notifications, and remove all websites you see there. I do see you mentioned pop-ups, but just wanted to clarify what you are seeing.

Possible hack on my iMac and EtreCheck problem

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.