Pop-up window: Apple wants to make changes

I repeatedly get a pop-up window saying “Apple want to make changes. Enter your password to allow this.” There is no mention of what is to be changed nor why. I, of course, don’t enter the password and have to close three iterations of the window before it goes away until the next day.

Is this an attempted hack of my computer? IF so, how to delete it from my system?


User uploaded file


Mac Pro (mid 2010), OS X 10.13.5

VIN,MacBook Air (13-inch Mid 2011), macOS High Sierra (10.13.5)

Posted on Aug 19, 2018 4:45 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 6, 2019 1:17 PM

It's malware/adware. Do not enter your password.


Restart and hold down the Shift key. This will put the Mac into Safe Mode. Only specific items are allowed to load, meaning this garbage will not be able to pop up. Once in Safe Mode, then you'll be able to run MalwareBytes to remove it.

107 replies

Sep 7, 2018 7:35 AM in response to artphiffer

Very good of them to take the time to help you out with that. I took Mathew's post as more of a question of why the OS doesn't stop things like this. Apple does incorporate quite a bit of quiet protection in the background of the OS. But, like any such protection, it can only block what it knows about. Newer threats first have to be found and recognized, then the time taken to figure out how to effectively block/remove it, and then distribute those fixes.

Sep 8, 2018 7:39 PM in response to artphiffer

Above I stated that Apple Support helped me correct the "Apple wants to make changes" pop-up. I take it all back. After making the changes to Safari's preferences, I had thought that the problem was solved, but it reoccured. I will call back to Apple Support once again to see if there are other fixes. I will post anything that I learn from them on this thread.

Sep 11, 2018 7:14 AM in response to QZ9

I just had the same problem. To resolve, I first emptied the caches in Safari, then closed all apps. Re-opened Safari and went to Preferences -> Manage Website Data and deleted all cookies, etc that I didn't use or recognize. Closed Safari again and went to ~User -> Library -> Safari -> Databases and deleted all databases that I didn't use or recognize. Re-opened Safari and all other apps and the popup message no longer appears.

Sep 13, 2018 7:24 AM in response to pipfromhanover

There’s a bit more to it. You’ve checked safari but also check for unknown programs installed to your Mac. If you haven’t run Malwarebytes. Check users and groups > login items


Basically you’re checking places programs can hide. Also check watch to see if the pop up happens on specific websites you may end up contacting that webmaster as they may not know their server is flooding out popups

Most of these aren’t actual popups but JavaScript so the way it comes up bypasses some blocks you may already have in pl

Sep 13, 2018 7:49 AM in response to QZ9

Like a novice idiot, I fell for this and entered my password after getting the "Apple wants to make changes" pop up. Then I checked the forums and found this thread. Needless to say I should have checked the forum first! Anyway, I have immediately changed my MAC access password. Then I ran Malwarebytes and deleted everything it detected. Then I cleared: Cache, history & website data. Here are a few links to help clean up your computer.


Free Antivirus Replacement & Anti-Malware Tool | Malwarebytes

https://nektony.com/blog/how-to-reset-safari-on-mac

https://macsecurity.net/view/188-remove-anysearchmanager-malware-from-mac

Sep 13, 2018 1:17 PM in response to QZ9

I called Apple Support today, 9/13/18. They said it's ok and to type password. I had just uninstalled Norton Security because I realized I didn't need it. The weird thing was though, the popup came after it UNinstalled and my computer restarted. Apple Support said it was ok. I hope they are right. They helped me install Malwarebytes as well at my request.

Sep 13, 2018 1:31 PM in response to Gailbrickner

I called Apple Support today, 9/13/18. They said it's ok and to type password.

It would be interesting to know what number you called. It's hard to believe an Apple employee would say it's okay to allow a vague request for admin access.


Is this a number you found by doing a Google search for "Apple support", or the actual customer service number found on Apple's site?

Sep 15, 2018 2:44 PM in response to QZ9

I've had the same problem for about two weeks. The open Safari browser disappears and a few seconds late, the pop-up appears, asking for a password. This morning, I took the advice of several posters and downloaded the trial version of Malwarebytes. After the first scan, Malwarebytes found and quarantined two files titled "com.ExploreSearchResults" and "com.ExploreSearchResults.plist"

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Pop-up window: Apple wants to make changes

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.