Announcement: Upgrade to macOS Mojave

With features like Dark Mode, Stacks, and four new built-in apps, macOS Mojave helps you get more out of every click. 
Find out how to upgrade to macOS Mojave > https://support.apple.com/macos/mojave

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: "Your system is infected with 3 viruses!"

User uploaded fileUser uploaded file

Hello,


My name is Blue and I need your help.


I have a Macbook Pro with OS X El Capitan Version 10.11.6. It's a 13.3-inch display with an Intel Iris Graphics and a 251 GB storage capacity.


A pop-up appeared from:


apple.com-supportcenter.pro/401/virusfound.php?_jsess=cc2189bf...


Page states: "Your system is infected with 3 viruses!"


Continuing: "Your Mac is infected with 3 viruses. Our security check found traces of 2 malware and 1 phishing/spyware. System damage: 28.1% - Immediate removal require!"


It appears to be a malware but there's a logo that says, "AppleCare Protection Plan." It seemed legit. I exited the page immediately but was left unsure...


I attached two screenshots to this post. What do you think?


Thank you for your time.

MacBook Pro with Retina display, OS X El Capitan (10.11.6)

Posted on

Reply
Question marked as Solved
Answer:
Answer:

It's a scam. The only time a message warning of malware in a Mac OS X or iOS web browser will be legitimate is if you've just uploaded a file to a website; they cannot scan your computer, but can scan files which were uploaded to them(it's done on the server.)


(148275)

Posted on

Page content loaded

Dec 1, 2017 10:28 AM in response to bluebookmark In response to bluebookmark

Lol bro.your mac IS infected, but from ADs.Thats just an adware/scareware popup.Does it beep 2 times?My brother had that problem.Download bitdefender from app store thats how we fixed it.Your bitdefender will find 10 viruses one will be called "rek" if u have the same issue.we just fixed it.just scan go to its folder delete.Its just one malicious file *.unix format.they are always infected because someone went to hack u from linux/unix kali because Thats the only way to hack.has this solved ur problem

again: download bitdefender on app store scan full and erase these files.Do not download another antivirus because ur mac will go crazy. thanks

Dec 1, 2017 10:28 AM

Reply Helpful (2)

Dec 3, 2017 8:39 PM in response to dascamp71 In response to dascamp71

What it's infected with is adware, which you installed sometime recently. The highly unethical company that markets MacKeeper invests very heavily in ads pushed through adware. It, of course, claims to find all kinds of problems when it has been proven over and over that the app flat out lies.


Removing MacKeeper itself should be as simple was quitting the app and dragging it to the trash. It should then ask if you want to uninstall. Say yes.


What you then really need to get rid of is the adware that inticed you download MacKeeper in the first place. Download and run MalwareBytes for Mac.

Dec 3, 2017 8:39 PM

Reply Helpful

Dec 5, 2017 8:57 AM in response to GiantSkeleton098 In response to GiantSkeleton098

He deleted the download without running the installer. It did nothing.


All AV software on the App Store are worthless. They can't possibly do what they say since anything in the App Store has severe restrictions on what areas of the drive they can access. The most they can do is very simple things you can do yourself. Such as removing all browser extensions.

Dec 5, 2017 8:57 AM

Reply Helpful

Jan 26, 2018 7:43 AM in response to BlueHat1371 In response to BlueHat1371

The entire point of the loud beep is to scare the user into thinking something tragic has happened to their computer.


Nothing has happened!


Nothing other than a fake site is trying to convince you it has. Despite being created to mimic Apple's site, there is no such thing as "AppleCare Protection Plan".


In the newer versions of Safari, all you should have to do is click the back button. Maybe twice. Safari will pop up a message asking if you really want to leave the page. Confirm that you do.


You don't need to do anything else other than avoid the site that sent you to the scam page in the first place.

Jan 26, 2018 7:43 AM

Reply Helpful (1)

Jan 28, 2018 8:14 AM in response to Naught Jack In response to Naught Jack

Not to worry. Whatever the scan button was supposed to do, didn't happen. It could only have done one of three things.


1) Prompt a download through a normal web action.


2) Redirect you to another site.


Since nothing appeared to have happened, the only other possible action would be this one.


3) If you had Java installed and active for your browser, it could have run a Java applet. What that would do depends on how it was written.


Since even that didn't happen (like most folks, I presume you don't even have Oracle's Java 8 installed), it couldn't do anything.

Jan 28, 2018 8:14 AM

Reply Helpful

Feb 18, 2018 5:44 AM in response to Kurt Lang In response to Kurt Lang

In my experience this doesn't just keep popping up on one specific site, but on several sites when I click on a url. This includes highly respectable websites whose providers I'm sure have not made any shady deals with the people behind that scam pop-up. So I'm a little doubtful as to this being a problem on one specific website only.

Feb 18, 2018 5:44 AM

Reply Helpful (3)
User profile for user: bluebookmark

Question: "Your system is infected with 3 viruses!"