"Your system is infected with (3) Viruses” when opening a Safari tab

This message came up when I was opening a new window in the Safari browser and makes all sorts of threats if I don’t call Apple Support at 1-866-726-**** and follow Virus removal procedure immediately. I’m always wary of these things and just want to know if anyone else has run across this particular warning.

[Re-Titled by Moderator]

Posted on Mar 20, 2018 9:38 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 20, 2018 9:40 AM

It's phishing.

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support

Force Quit Safari ( command + option + esc keys).Then restart Safari holding the Shift key. If you still have problems Empty Caches (Safari menu > Preferences > Privacy > Remove all website data. (This will also remove history if you do not want to remove History open Safari Preferences > Advanced and check mark “Show Develop Menu” then choose “Empty Caches” from Develop Menu ).

Then go to Safari Preferences > Extensions and check there. If there is an extension delete it.

If the problem persists download and run MalwareBytes. Malwarebytes was developed by one of our own colleagues here in ASC and is about the most proven anti-malware software for Mac.

1,218 replies

Aug 22, 2018 6:56 AM in response to RoGeBa

So many common questions, virtually all with one answer.

Usually phishers don’t just target a single machine or person, they “cast” a bunch of machines to see if they get a bite.... that’s why it’s called “phishing”.

It's still phishing. Doesn't matter if it came as an email, text message or otherwise. Casting is exactly what the crooks are doing using any of these methods. Send out the same junk to thousands, hundreds of thousands or millions of collected email addresses and see who responds.

I had the same problem last week. It was really annoying. I realized I visited online WhatsApp chat on my MacBook which asked me to download flash player, since then I got the virus problem.

Not a virus. You installed it. That's a Trojan. Viruses replicate with no user interaction necessary. Trojans require your help to do anything. You installed adware.

it happened to me too... should I call the real apple support ( not the number it showed) and is my Mac ok??

Yes, you're okay. It's nothing but a scam message.

I get this pop up saying I’m an Amazon winner…

This particular advertiser is buying tons of ad space through various ad servers. It's still just an ad. Usually causing a redirect to another site rather than simply displaying an ad on the site you were at.

I've done everything suggested, but I still have a notification at the top right of my screen that says 358 issues found..... There is no close button other than to press 'start repair' which I obviously won't do. How do I get rid of this screen?

See solution at the end of this post.

I get that message about once a week. It doesn't seem to be triggered by any particular website I visit. I would love to learn how to keep it from popping up. According to Malwarebytes I don't have any viruses on my computer.

And you don't since there are zero viruses on the Mac or iOS. Seeing them that often means you either installed adware, or you are simply visiting the same sites where these ads are. Keep going there and you'll keep getting the same ads or scam messages.

Today I got a message from a Apple support (on my phone 6s) saying that if I don’t contact Apple support three viruses will be installed. Idk of its real or not, has anyone else had this problem?

Yes, thousands of users get these scam messages every day. No, it's not real. Ignore.

I pay a fair amount in annual dues for various protection schemes for all our machines/devices/services…

Then you are truly wasting your money. Get rid of this junk service and simply use your head.

Just got the same popup when accessing a website using Safari. Completely locked my computer.

No, it locked Safari into a continuous JavaScript loop. All you needed to do was close Safari and restart it with the Shift key held down.

Safari opens a new window with this message all the time. When I just move my mouse over any given page a new window opens up with it. How can I remove this virus?

Not a virus. See earlier response above about viruses. That you're seeing them so often pretty much says you installed adware.


For iOS devices:


1. Double tap the Home button to call up the Application Switcher.

2. Slide Safari up and off the screen to close it.

3. Go to Settings > Safari. Tap the button to Clear History and Website Data.


This will only last as long as it takes you to go to a site that displays the same garbage popups and ads. Best current solution is to install an ad blocker. There are various free ones in the App Store. They can't stop everything, but will drastically reduce how much of this junk you get.


For Safari on your Mac:


1. Force Quit Safari.

2. Hold the Shift key down and relaunch it. This tells Safari not to remember any open sites from the previous session.

3. If that alone doesn't work (it's supposed to, but doesn't always work), disconnect from the Internet by either unplugging your wired Ethernet connection, or by turning off Wi-Fi. Launch Safari again. Repeat step two. With no way for the remote site to run JavaScript actions to keep a page open, you can now close them.

4. Re-establish your Internet connection.


Thomas Reed, who wrote and maintains MalwareBytes for Mac, noted recently that because of security changes in the Mac OS, they can no longer reset the Home page. So, if Safari is still going to a particular scam site at each launch of the app, you'll have to manually remove that entry in Safari's preferences. Which likely won't stick until you've removed the adware you've installed.

Nov 1, 2018 5:22 AM in response to karlveit

Read this entire topic (and many others regarding the same thing on these forums). You don't have a virus of any kind. One, there is not, and has yet to be an actual virus in the Mac OS. Two, it's nothing but a scam page trying to convince you to call a scammer who will attempt to charge you lots of money to fix nothing. Or, or to purchase scam software that does nothing and fixes nothing.

Jan 16, 2019 6:09 AM in response to h_grimes23

In the future, never, ever believe any popup from a web site that says you need a Flash/Java/codec installed. They will be a lie every single time. What you installed had nothing to do with Flash. You installed just what they wanted you to - malicious adware.


Just a note. It's a not a virus. Those move from one device to another with no user interaction. This was a Trojan. Something that cannot get on a computer without your assistance. As with any Trojan, you installed it.


The only and only place to get updates for Flash is directly from Adobe.

May 13, 2019 4:47 PM in response to atlantaferg

I had a pop up on my iphone 6S with apple icon warning "browser 43% damaged" by Trojan virus displaying Apple icon with message to dowload a VPN app and this page did not have phone number but did have green but to Install app


Address at top was NOT Apple (sorry closed it without writing it down first) dbl clicked home button and closed open site pages


Any truth or more phishing ?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

"Your system is infected with (3) Viruses” when opening a Safari tab

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.