A phishing scam has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus. The user is then offered Mac Defender 'anti-virus' software to solve the issue.
This “anti-virus” software is malware (i.e. malicious software). Its ultimate goal is to get the user's credit card information which may be used for fraudulent purposes.
The most common names for this malware are MacDefender, MacProtector and MacSecurity.
Apple released a free software update (Security Update 2011-003) that will automatically find and remove Mac Defender malware and its known variants.
The Resolution section below also provides step-by-step instructions on how to avoid or manually remove this malware.
One of the best Mac cleaner apps, Dr. Cleaner heals your processing system by cleaning out and removing cache files, trash files, and junk left behind by uninstalled apps. It is an apt choice to speed up Mac as it offers Disk Cleaning, System Monitoring, and Memory Optimization for a smooth performance. How to get rid Of Advanced Mac Cleaner Virus Scam tool by mac3422 Sep 28, 2015 2:44AM PDT Accidently installed Advanced Mac Cleaner on my Mac book Air and now unable to uninstall it.
Resolution
How to avoid installing this malware
Pc Mac Cleaner Scam
If any notifications about viruses or security software appear, quit Safari or any other browser that you are using. If a normal attempt at quitting the browser doesn’t work, then Force Quit the browser.
In some cases, your browser may automatically download and launch the installer for this malicious software. If this happens, cancel the installation process; do not enter your administrator password. Delete the installer immediately using the steps below.
- Go into the Downloads folder, or your preferred download location.
- Drag the installer to the Trash.
- Empty the Trash.
How to remove this malware
If the malware has been installed, we recommend the following actions:
- Do not provide your credit card information under any circumstances.
- Use the Removal Steps below.
Removal steps
- Move or close the Scan Window.
- Go to the Utilities folder in the Applications folder and launch Activity Monitor.
- Choose All Processes from the pop up menu in the upper right corner of the window.
- Under the Process Name column, look for the name of the app and click to select it; common app names include: MacDefender, MacSecurity or MacProtector.
- Click the Quit Process button in the upper left corner of the window and select Quit.
- Quit Activity Monitor application.
- Open the Applications folder.
- Locate the app ex. MacDefender, MacSecurity, MacProtector or other name.
- Drag to Trash, and empty Trash.
Malware also installs a login item in your account in System Preferences. Removal of the login item is not necessary, but you can remove it by following the steps below.
- Open System Preferences, select Accounts, then Login Items
- Select the name of the app you removed in the steps above ex. MacDefender, MacSecurity, MacProtector
- Click the minus button
Use the steps in the “How to avoid installing this malware” section above to remove the installer from the download location.
Note: Apple provides security updates for the Mac exclusively through Software Update and the Apple Support Downloads site. User should exercise caution any time they are asked to enter sensitive personal information online.
How to remove Apple Warning Alert from Mac?
What is Apple Warning Alert?
'Apple Warning Alert' is a fake error messaged displayed by a malicious website to which users are redirected by various potentially unwanted programs (PUPs). These programs are known to infiltrate systems without consent. In addition, they continually record user-system information relating to web browsing activity and deliver intrusive online advertisements.
The 'Apple Warning Alert' error states that the system is infected with a type of spyware/malware. It also states that this virus poses a direct threat to privacy (logins/passwords, banking details, etc. might be stolen) and users must eliminate the risk immediately by contacting 'expert engineers' via a telephone number ('1-800-796-7125') provided. These 'engineers' then supposedly guide victims through the malware removal process. Be aware, however, that 'Apple Warning Alert' is fake and has nothing to do with Apple. This error is a merely a scam - cyber criminals claim to be computer technicians and attempt to monetize 'services' that are not required by users. The malware does not exist and, therefore, 'Apple Warning Alert' error should be ignored. You can remove it by closing the web browser. Furthermore, PUPs continually record browsing activity by gathering various user-system information that might be personally identifiable. PUP developers collect IP addresses, website URLs visited, pages viewed, queries entered into search engines, and other similar data. They sell this private information to third parties (potentially, cyber criminals) who also aim to generate revenue by misusing personal details. This behavior can lead to serious privacy issues or even identity theft. Another downside is display of intrusive online advertisements. PUPs employ various tools that enable placement of third party graphical content on any site. Therefore, displayed ads (pop-ups, coupons, banners, etc.) often conceal underlying content, thereby significantly diminishing the browsing experience. In addition, the ads might run scripts that download and install other PUPs or even viruses. Therefore, even accidental clicks can result in high-risk computer infections. For these reasons, all PUPs should be uninstalled immediately.
| Name | 'Apple Warning Alert' virus |
| Threat Type | Mac malware, Mac virus |
| Symptoms | Your Mac became slower than normal, you see unwanted pop-up ads, you get redirected to shady websites. |
| Distribution methods | Deceptive pop-up ads, free software installers (bundling), fake flash player installers, torrent file downloads. |
| Damage | Internet browsing tracking (potential privacy issues), displaying of unwanted ads, redirects to shady websites, loss of private information. |
| Malware Removal (Mac) | To eliminate possible malware infections, scan your Mac with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. |
The Internet is full of deceptive websites that display fake errors similar to 'Apple Warning Alert' including, for example, YOUR MAC HAS BEEN BLOCKED, Critical Security Warning!, and Internet Security Damaged. All state that the system is infected, missing files, or damaged in other similar ways, however, they are designed only to scare and trick victims into paying for services that are not required. All PUPs are virtually identical. By offering various 'useful features', they attempt to give the impression of legitimacy, however, their only purpose is to generate revenue for the developers. Rather than providing any significant value for regular users, PUPs promote malicious websites, deliver intrusive advertisements (using the 'Pay Per Click' advertising model), and record user-system information.
How did potentially unwanted programs install on my computer?
To proliferate PUPs, developers employ the aforementioned advertisements together with a deceptive marketing method called 'bundling'. Developers know that users often rush the download and installation processes. Therefore, they conceal bundled apps within the 'Custom' or 'Advanced' options. Skipping this section and clicking various ads exposes systems to risk of infections and compromises users' privacy.
How to avoid installation of potentially unwanted applications?
PUPs are distributed using intrusive ads and the aforementioned bundling method. Therefore, be cautious when downloading/installing software and browsing the Internet in general. Carefully analyze each download/installation step using the 'Custom' or 'Advanced' settings and opt-out of all additionally-included programs. Third party software download/installation set-ups often include additional programs - we strongly advise against using them. Note that cyber criminals spend many resources designing intrusive ads and, thus, most look genuine. Therefore, no matter how tempting the ads may seem, do not take the risk of clicking them. The main reasons for computer infections are poor knowledge and careless behavior - the key to computer safety is caution. If your computer is already infected with PUPs, we recommend running a scan with Combo Cleaner Antivirus for macOS to automatically eliminate them
Is Advanced Mac Cleaner Scam
Pop-up of 'Apple Warning Alert' scam:
Text presented within 'Apple Warning Alert' scam:
Apple Warning Alert
Malicious Pornographic Spyware/Riskware Detected
Error # 0x80027ee7
Please call us immediately at: 1-800-796-7125
Do not ignore this critical alert.
If you close this page, your computer access will be disabled to prevent further damage to our network.
Your computer has alerted us that it has been infected with a Pornographic Spyware and risk ware. The following information is being stolen…
> Financial Data
> Facebook Logins
> Credit Card Details
> Email Account Logins
> Photos stored on this computer
You must contact us immediately so that our expert engineers can walk you through the removal process over the phone to protect your identity. Please call us within the next 5 minutes to prevent your computer from being disabled or from information loss.
Instant automatic Mac malware removal:Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of Mac malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner for MacBy downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
Quick menu:
- STEP 1. Remove PUP related files and folders from OSX.
- STEP 2. Remove rogue extensions from Safari.
- STEP 3. Remove rogue add-ons from Google Chrome.
- STEP 4. Remove potentially unwanted plug-ins from Mozilla Firefox.
Video showing how to remove adware and browser hijackers from a Mac computer:
Potentially unwanted programs removal:
Remove PUP-related potentially unwanted applications from your 'Applications' folder:
Click the Finder icon. In the Finder window, select “Applications”. In the applications folder, look for “MPlayerX”,“NicePlayer”, or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.
Combo Cleaner checks if your computer is infected with malware. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
Remove 'apple warning alert' virus related files and folders:
Click the Finder icon, from the menu bar. Choose Go, and click Go to Folder...
Check for adware-generated files in the /Library/LaunchAgents folder:
In the Go to Folder... bar, type: /Library/LaunchAgents
In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.
Check for adware generated files in the /Library/Application Support folder:
In the Go to Folder... bar, type: /Library/Application Support
In the “Application Support” folder, look for any recently-added suspicious folders. For example, “MplayerX” or “NicePlayer”, and move these folders to the Trash.
Check for adware-generated files in the ~/Library/LaunchAgents folder:
In the Go to Folder bar, type: ~/Library/LaunchAgents
In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.
Check for adware-generated files in the /Library/LaunchDaemons folder:
In the Go to Folder... bar, type: /Library/LaunchDaemons
In the “LaunchDaemons” folder, look for recently-added suspicious files. For example “com.aoudad.net-preferences.plist”, “com.myppes.net-preferences.plist”, 'com.kuklorest.net-preferences.plist”, “com.avickUpd.plist”, etc., and move them to the Trash.
Scan your Mac with Combo Cleaner:
If you have followed all the steps in the correct order you Mac should be clean of infections. To be sure your system is not infected run a scan with Combo Cleaner Antivirus. Download it HERE. After downloading the file double click combocleaner.dmg installer, in the opened window drag and drop Combo Cleaner icon on top of the Applications icon. Now open your launchpad and click on the Combo Cleaner icon. Wait until Combo Cleaner updates it's virus definition database and click 'Start Combo Scan' button.
Combo Cleaner will scan your Mac for malware infections. If the antivirus scan displays 'no threats found' - this means that you can continue with the removal guide, otherwise it's recommended to remove any found infections before continuing.
After removing files and folders generated by the adware, continue to remove rogue extensions from your Internet browsers.
'Apple Warning Alert' virus removal from Internet browsers:
Remove malicious extensions from Safari:
Remove 'apple warning alert' virus related Safari extensions:
Open Safari browser, from the menu bar, select 'Safari' and click 'Preferences...'.
In the preferences window, select 'Extensions' and look for any recently-installed suspicious extensions. When located, click the 'Uninstall' button next to it/them. Note that you can safely uninstall all extensions from your Safari browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Safari.
Remove malicious plug-ins from Mozilla Firefox:
Remove 'apple warning alert' virus related Mozilla Firefox add-ons:
Open your Mozilla Firefox browser. At the top right corner of the screen, click the 'Open Menu' (three horizontal lines) button. From the opened menu, choose 'Add-ons'.
Choose the 'Extensions' tab and look for any recently-installed suspicious add-ons. When located, click the 'Remove' button next to it/them. Note that you can safely uninstall all extensions from your Mozilla Firefox browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Mozilla Firefox.
Remove malicious extensions from Google Chrome:
Remove 'apple warning alert' virus related Google Chrome add-ons:
Open Google Chrome and click the 'Chrome menu' (three horizontal lines) button located in the top-right corner of the browser window. From the drop-down menu, choose 'More Tools' and select 'Extensions'.
In the 'Extensions' window, look for any recently-installed suspicious add-ons. When located, click the 'Trash' button next to it/them. Note that you can safely uninstall all extensions from your Google Chrome browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Google Chrome.