"Your system is infected with (3) Viruses” when opening a Safari tab

This message came up when I was opening a new window in the Safari browser and makes all sorts of threats if I don’t call Apple Support at 1-866-726-**** and follow Virus removal procedure immediately. I’m always wary of these things and just want to know if anyone else has run across this particular warning.

[Re-Titled by Moderator]

Posted on Mar 20, 2018 9:38 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 20, 2018 9:40 AM

It's phishing.

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support

Force Quit Safari ( command + option + esc keys).Then restart Safari holding the Shift key. If you still have problems Empty Caches (Safari menu > Preferences > Privacy > Remove all website data. (This will also remove history if you do not want to remove History open Safari Preferences > Advanced and check mark “Show Develop Menu” then choose “Empty Caches” from Develop Menu ).

Then go to Safari Preferences > Extensions and check there. If there is an extension delete it.

If the problem persists download and run MalwareBytes. Malwarebytes was developed by one of our own colleagues here in ASC and is about the most proven anti-malware software for Mac.

1,218 replies

Apr 21, 2018 12:49 PM in response to atlantaferg

I got it too, but it didn't give me a phone number, it has a pick button to "Scan Now" (I didn't pick it), then another pop up saying "Immediate action required" "we have detected a trojan virus (e.tre456_worm)osx) on your mac. Press OK to begin repair process.


I did neither - i exited Safari and cleared my history.

Hopefully this will be the end of it. I will try a force quit, just in case. Thanks

Aug 25, 2019 7:26 AM in response to Mystic118

You very likely got something you don't want, start a new topic & post an etrecheck report.


EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.

http://www.etresoft.com/etrecheck


Pastebin is a good place to paste the whole report...

https://pastebin.com/


Workable but harder for me to work with...the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck.

There is also Malwarebytes...

https://www.malwarebytes.com/mac/

Sep 8, 2019 2:53 PM in response to Banana_2018

Note for BDAqua's link.


Make sure to follow ONLY the manual instructions. Clicking on either of the very front-and-center links to use CleanMyMacX or ComboCleaner would only succeed in trading one piece of trash for another.


Thomas Reed (member here and now working at MalwareBytes) has noted that you can put the name of any app for Windows or Mac you want to remove in a web search and you will hit hundreds of sites pushing you to download some tool to do the work for you. They've found that in many (such as, MOST) cases, the tool is more dangerous than what you're trying to remove from your drive.

Nov 17, 2019 4:50 AM in response to zayyir

Hey Zayyir! Don't bother, it is a scam, once in a while I get a window like that and just ignore it. And camera, all I do is put electrical black tape over it and go into system settings and go to the mic and turn the volume off or down since if you are not using it. Plus I go the the apple store and get Antivius Zap and BitMedic to check your computer, I did it and found nothing on mine, so the site comes up is a scam, apple doesn't do that. I get a fake apple page, because I see and site name doesn't look right.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

"Your system is infected with (3) Viruses” when opening a Safari tab

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.