Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Malware

Hi, last evening I accidentally opened a website which said love you Pakistan on my Mac book air and then my computer started to shout “your computer has been evaded by a malware, contact Apple support. Although I closed all the tabs immediately it kept repeating. I immediately restarted the computer and looked up on my iPhone the steps to remove a malware. I emptied the download list and the trash can. Checked in the applications folder if any unknown software was found. But nothing seems to be there. I downloaded a malware scan from the App Store by utilities and ran a full scan. It said 0 virus detected. But even now when I log onto say Facebook, I receive a message from Apple that it looks like this device was infected with malicious content, if you are sure you have scanned your computer and deleted all viruses then proceed logging in. This is my 3rd year after purchasing the Mac and I do not have the Apple care plan. Can any body recommend some fixes?

MacBook Air (13-inch, Early 2015), iOS 11.1

Posted on Nov 18, 2017 12:40 AM

Reply
3 replies

Nov 18, 2017 4:31 AM in response to Sashroff

1. Click  in the menu bar and choose “Force Quit”.

In the window that opens up, select “Safari” and click “Force Quit.


2. Relaunch Safari holding the shift key down.


Additional steps if needed:


3. Turn off wifi and turn it back on.


Turn off Wifi. Click Wifi icon in the menu bar and select “Turn Wifi off”.

Visit another website.

You won’t have internet connection.

Turn on Wifi. Click Wifi icon in the menu bar and select “Turn Wifi on”.

Select your Network.



4. Click Safari in the Safari menu bar and choose “Clear History”.

Select an appropriate time frame.

Nov 18, 2017 8:58 AM in response to Sashroff

Sashroff wrote:


I downloaded a malware scan from the App Store by utilities and ran a full scan. It said 0 virus detected.

Hello Sashroff,

I'm sorry to hear that. Due to the technical restrictions imposed by the App Store, it is impossible to have a fully functional security app. Any such app should be considered as more "entertainment" than true security. I strongly suggest that you remove it. Apple's macOS operating system already includes several levels of built-in malware protection. Apple is still working on ways to protect users from scam web sites, which is probably what you encountered. If you do want to install additional 3rd party security software, please see tjk's recommendation for MalwareBytes above.


But even now when I log onto say Facebook, I receive a message from Apple that it looks like this device was infected with malicious content, if you are sure you have scanned your computer and deleted all viruses then proceed logging in.

Is this a pop-up or an ad in Facebook? Can you post a screenshot with any personal items obscured? Use Apple's Preview app to draw black boxes over any personal areas.


There are two possibilities:

1) This was just a web scam. These can come via "grey market" web sites or even ads on full legitimate web sites. Once you trigger one, they will pull all kinds of personal information about you into their global advertising network. Facebook also uses that same network. It is entirely possible that Facebook is serving you an ad for some scam app. There are many such apps.


2) You actually did install some kind of malware, adware, or scamware. There is a lot of that on the internet. You can install MalwareBytes as instructed above. If you decide to remove MalwareBytes, just make sure to use the included uninstaller. You cannot remove it manually.


Another option would be a little diagnostic program I wrote to help show what adware is installed. Download EtreCheck from https://www.etrecheck.com, run it, and paste the results here. EtreCheck is perfectly safe to run, does not ask for your password to install, and is signed with my Apple Developer ID. When you are done, EtreCheck can be thrown in the trash.


If adware is installed, EtreCheck will help you remove it, although you may have to supply a password. If you aren’t comfortable with that, just post the EtreCheck report here and other helpers can tell you exactly what files need to be deleted and how to do so.


Disclaimer: Although EtreCheck is free, there are other links on my site that could give me some form of compensation, financial or otherwise.

Malware

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.