Pop-up window: Apple wants to make changes

Very good of them to take the time to help you out with that. I took Mathew's post as more of a question of why the OS doesn't stop things like this. Apple does incorporate quite a bit of quiet protection in the background of the OS. But, like any such protection, it can only block what it knows about. Newer threats first have to be found and recognized, then the time taken to figure out how to effectively block/remove it, and then distribute those fixes.

I tried this and found something called "test my net" that had been allowed to send notifications. Disallowed and trashed it. I don't know for sure yet, but since it was the only thing allowed to send notifications I'm assuming it was the problem.

Malware, for sure.

Above I stated that Apple Support helped me correct the "Apple wants to make changes" pop-up. I take it all back. After making the changes to Safari's preferences, I had thought that the problem was solved, but it reoccured. I will call back to Apple Support once again to see if there are other fixes. I will post anything that I learn from them on this thread.

I believe "Mac Auto Fixer" is the culprit. I noticed it was in my "startup" applications.

1. Navigate to System Preferences (looks like gears), User & Groups, Login Items, and delete Mac Auto Fixer.

2. Using Finder, Go to Applications and delete "Mac Auto Fixer."

Good Luck

I just had the same problem. To resolve, I first emptied the caches in Safari, then closed all apps. Re-opened Safari and went to Preferences -> Manage Website Data and deleted all cookies, etc that I didn't use or recognize. Closed Safari again and went to ~User -> Library -> Safari -> Databases and deleted all databases that I didn't use or recognize. Re-opened Safari and all other apps and the popup message no longer appears.

This just happened to me also after visiting Axios website, or it may have been from one of it's links. I clicked the close button and it popped again. This time I did the "Command Esc" and saw a small blank document icon with a "P" next to it. When I did the force quit that took care of it.

There’s a bit more to it. You’ve checked safari but also check for unknown programs installed to your Mac. If you haven’t run Malwarebytes. Check users and groups > login items

Basically you’re checking places programs can hide. Also check watch to see if the pop up happens on specific websites you may end up contacting that webmaster as they may not know their server is flooding out popups

Most of these aren’t actual popups but JavaScript so the way it comes up bypasses some blocks you may already have in pl

Like a novice idiot, I fell for this and entered my password after getting the "Apple wants to make changes" pop up. Then I checked the forums and found this thread. Needless to say I should have checked the forum first! Anyway, I have immediately changed my MAC access password. Then I ran Malwarebytes and deleted everything it detected. Then I cleared: Cache, history & website data. Here are a few links to help clean up your computer.

Free Antivirus Replacement & Anti-Malware Tool | Malwarebytes

https://nektony.com/blog/how-to-reset-safari-on-mac

https://macsecurity.net/view/188-remove-anysearchmanager-malware-from-mac

I called Apple Support today, 9/13/18. They said it's ok and to type password. I had just uninstalled Norton Security because I realized I didn't need it. The weird thing was though, the popup came after it UNinstalled and my computer restarted. Apple Support said it was ok. I hope they are right. They helped me install Malwarebytes as well at my request.

I called Apple Support today, 9/13/18. They said it's ok and to type password.

It would be interesting to know what number you called. It's hard to believe an Apple employee would say it's okay to allow a vague request for admin access.

Is this a number you found by doing a Google search for "Apple support", or the actual customer service number found on Apple's site?

I had this exact problem, which repeated every morning whether or not I shut down or restarted. I never entered any passwords, but today I installed the free Malwarebytes and a scan showed three ADWARE items, which I removed. I hope the problem is gone but should wait until tomorrow to be sure.

I've had the same problem for about two weeks. The open Safari browser disappears and a few seconds late, the pop-up appears, asking for a password. This morning, I took the advice of several posters and downloaded the trial version of Malwarebytes. After the first scan, Malwarebytes found and quarantined two files titled "com.ExploreSearchResults" and "com.ExploreSearchResults.plist"

I had same issue. I believe it first appeared when I was reading a news site, perhaps the Washington post, as another poster suggested. It would pop up periodically and it would go away for a while when I hit cancel 3 times. Followed tammylig's advice - except for Malwarebytes. The Plugins panel did have a plug in I did not remember seeing or using in the past, called Widevine something or other. I unchecked it in this plug in panel. But then I used finder to search for the plug in and then trashed it, and emptied the trash. Hopefully, that gets rid of it.

It appears this adware/malware is doing what a lot of newer ones do. It keeps changing the name of the files it uses to run. Some of these have a list of thousands of names it randomly chooses.

I've been following all of the topics of this malware, and even in the same topic, MalwareBytes finds different file names that when removed, clear up this "Apple wants to make changes" junk.