Pop-up window: Apple wants to make changes

I repeatedly get a pop-up window saying “Apple want to make changes. Enter your password to allow this.” There is no mention of what is to be changed nor why. I, of course, don’t enter the password and have to close three iterations of the window before it goes away until the next day.

Is this an attempted hack of my computer? IF so, how to delete it from my system?


User uploaded file


Mac Pro (mid 2010), OS X 10.13.5

VIN,MacBook Air (13-inch Mid 2011), macOS High Sierra (10.13.5)

Posted on Aug 19, 2018 4:45 PM

Reply
Question marked as Top-ranking reply

Posted on Sep 1, 2018 6:04 AM

Check Safari > Preferences > Websites > then the Plug-Ins panel on the bottom left corner. Look and see if you have anything there you don't recognize. I suggest too actually running Malwarebytes and see if it detects it. This one is pretty solid of at least finding a part of a file tied to any form of malware. The wording is definitely off as someone pointed out Apple Vs Finder. It's definitely something installed or piece of something attached to a program or file.

Prior to this happening do you remember if you downloaded or were prompted to update anything that wasn't done directly through the Mac App Store.

107 replies

Sep 19, 2018 3:14 PM in response to Krlandry6

The networks you connected to while on vacation, were they networks you managed and controlled?

Malware is a blanket term that spans not just viruses, which are a form of malware. You can pick up something from it being placed into a network, another infected computer already on a network, websites, ads within websites, software installed with malicious files within it. A macOS update won’t install malware but for all intents and purposes it actually scans for it and also macOS is designed that when you restart or turn on your computer it runs a scan then. I can understand not wanting to install a program however read through this and countless other threads, most of us trust it because malwarebytes is on that doesn’t go fiddling or removing important systems files like some purported cleaning programs

Aug 19, 2018 11:29 PM in response to QZ9

I'm having the same problem on my Mac Pro with High Sierra 10.13.6. It occurs every 2 or 3 days and goes away after exactly 3 pop-ups and 3 cancels. I believe that it is malware mainly because I trust that Apple would not do this. Also, the use of "Apple" vs. "Finder" or some other system component is troubling. I'm using a WatchGuard Firebox T-70 security appliance with network anti-virus and I thought that I was immune from this stuff... apparently not. I listened to the "security now" podcast suggested by macfrombrampton and although possible, that vulnerability sounds like a bit of a stretch. I would appreciate an update if anyone finds out anything else. Otherwise, I'll sit and wait for Mojave and hope that no damage is done.

Sep 7, 2018 7:35 AM in response to artphiffer

Very good of them to take the time to help you out with that. I took Mathew's post as more of a question of why the OS doesn't stop things like this. Apple does incorporate quite a bit of quiet protection in the background of the OS. But, like any such protection, it can only block what it knows about. Newer threats first have to be found and recognized, then the time taken to figure out how to effectively block/remove it, and then distribute those fixes.

Sep 8, 2018 7:39 PM in response to artphiffer

Above I stated that Apple Support helped me correct the "Apple wants to make changes" pop-up. I take it all back. After making the changes to Safari's preferences, I had thought that the problem was solved, but it reoccured. I will call back to Apple Support once again to see if there are other fixes. I will post anything that I learn from them on this thread.

Sep 13, 2018 1:31 PM in response to Gailbrickner

I called Apple Support today, 9/13/18. They said it's ok and to type password.

It would be interesting to know what number you called. It's hard to believe an Apple employee would say it's okay to allow a vague request for admin access.


Is this a number you found by doing a Google search for "Apple support", or the actual customer service number found on Apple's site?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Pop-up window: Apple wants to make changes

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.