Level 1

31 points

Pop-up window: Apple wants to make changes

I repeatedly get a pop-up window saying “Apple want to make changes. Enter your password to allow this.” There is no mention of what is to be changed nor why. I, of course, don’t enter the password and have to close three iterations of the window before it goes away until the next day.

Is this an attempted hack of my computer? IF so, how to delete it from my system?

Mac Pro (mid 2010), OS X 10.13.5

VIN,MacBook Air (13-inch Mid 2011), macOS High Sierra (10.13.5)

Posted on Aug 19, 2018 4:45 PM

Top-ranking reply

tammylig

Level 1

48 points

Posted on Sep 1, 2018 6:04 AM

Check Safari > Preferences > Websites > then the Plug-Ins panel on the bottom left corner. Look and see if you have anything there you don't recognize. I suggest too actually running Malwarebytes and see if it detects it. This one is pretty solid of at least finding a part of a file tied to any form of malware. The wording is definitely off as someone pointed out Apple Vs Finder. It's definitely something installed or piece of something attached to a program or file.

Prior to this happening do you remember if you downloaded or were prompted to update anything that wasn't done directly through the Mac App Store.

View in context

107 replies

Sep 10, 2018 5:04 AM in response to artphiffer

I have Pop ups blocked and no extensions and i am still getting the pop up.

Sep 11, 2018 12:52 AM in response to mxswallow

Same here: Online, and the browser disappeared, then it asked me for this message. Took 3 times to cancel it, just like everyone else.

ml9782

Level 1

4 points

Sep 12, 2018 6:35 AM in response to Chantal2

Have you had any updates? Or figured out what the issue is?

rleden

Level 1

14 points

Sep 12, 2018 1:39 PM in response to QZ9

Has not come back. It was most likely Malwear.

Old Toad

Level 10

215,286 points

Sep 12, 2018 2:02 PM in response to Chantal2

Sep 13, 2018 7:12 AM in response to QZ9

I tried what tammylig suggested. When I looked at the plug-in panel is says Java is off". What now?

minners

Level 1

4 points

Sep 13, 2018 7:26 AM in response to tammylig

Thank you! That was very helpful.

Sep 15, 2018 5:57 AM in response to QZ9

I have the same issue, but I have plug-ins disabled. Other fixes? I am NOT giving it my password.

Sep 18, 2018 1:42 AM in response to QZ9

I have this too so please keep me posted. Im not very technical, so the easier the instructions the better for me, cheers

Sep 19, 2018 3:21 AM in response to Old Toad

cheers, just ran it and it found 13 of whatever it finds!!

Sep 19, 2018 3:22 AM in response to don from granite

thanks

rccharles

Level 6

13,037 points

Sep 19, 2018 7:09 PM in response to Kurt Lang

The box you're seeing is legitimate.

I though we determined it was fake. I don't think that is the wording used in macOS.

Here what I see when Finder asks for an admin password.

Sep 19, 2018 7:20 PM in response to Kurt Lang

Kurt, is there a log that can be brought up that will show what installs were made on the date that an actual password was provided to this pop up?

sugaray

Level 1

9 points

Sep 24, 2018 12:16 PM in response to QZ9

Second scan results after MacBook restart... Deleted file... Hope this helps...

sugaray

Level 1

9 points

Sep 24, 2018 12:19 PM in response to QZ9

Screen of Quarantine before deleting files....

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Pop-up window: Apple wants to make changes