Remove “Your system is infected with viruses” Pop-up (Mac)

“Your system is infected with viruses” pop-up appearing aggressively on Safari or Google Chrome of Mac computer is obviously a misleading alert. Normally, Mac users will receive this message when visiting websites that are involved in various suspicious activities like illegal distribution of pirated software, videos, and music. Seeing “Your system is infected with viruses” on Mac computer may end up into two fraudulent offerings like installation of bogus security application or availing services from a distrusted Mac technical support specialist or AppleCare Protection Plan.

“Your system is infected with viruses” – Scan Now

One deceitful pop-up claiming that Mac computer is under virus attack aims to influence user to run a full scan on the computer. The majority of users are not aware that clicking the Scan Now button will initiate the downloading of a rogue security application. So far, malicious Mac security applications such as Total Mac Fixer, Speedup My Mac, and Quick Mac Booster are employing this misleading tactic. Here is an excerpt from the pop-up alert.

Your system is infected with (3) viruses! Our security check found traces of 2 malware and 1 spyware/phishing. System damage: 28.1%. Immediate removal required.
The immediate removal of the viruses is required to prevent further system damage, loss of Apps, Photos or other files.
Traces of 1 phishing/spyware were found on your Mac with OS.
Personal and banking information are at risk.
To avoid more damage click on “Scan Now” immediately. Our deep scan will provide help immediately!

Screenshot of fake alert on Mac

When a Mac user downloads the endorsed application, several misbehavior will happen on the computer. First, the acquired security program will run a constant scan exhibiting quantity of virus infections. There will also be barrage of pop-up alerts prompting users to register the said security software in order to complete the removal process of identified contamination.

“Your system is infected with viruses” – Call Apple Support

Another motive for showing the fake alert is to entice Mac users into availing a paid technical support services being offered by scammers. The pop-up message may seem similar, hence, the objective on this campaign is to hook Mac users into remote administration services. During the process, Mac user will be diverted to a web page prompting for several computer details, personal data, and banking information like credit card account. The phony customer support representative will run several scan on the computer remotely and pretend that it has fixed the computer. This process will incur charges on the submitted credit card and it could happen without the proper knowledge or authorization from Mac user. Below is the sample misleading “Your system is infected with viruses” pop-up.

Your Mac OS is infected with (3) viruses. The pre-scan found traces of (2) malware and (1) phishing/spyware. System damage: 28.1% – Immediate removal required.
Please Call Apple Support 1-855…
The removal of (3) viruses is required immediately to prevent further system damage, loss of Apps, Photos or other files…

Screenshot of Fake Call Apple Support

What to do?

The mentioned alert is not actually coming from legitimate apps, these are pop-ups from a malicious website. In fact, these are online advertisements masquerading as official alert from Apple, Safari, or Google Chrome. What you need to do when seeing this “Your system is infected with viruses” pop-up is to close the browser program and scan the computer with valid anti-virus and anti-malware tools.

Safari Browser Workaround

Sometimes, “Your system is infected with viruses” pop-up is able to block Mac users from closing the said pop-up window. In this case, you need to force-quit the browser. Here is a workaround for Safari browser.

1. Click on Apple Menu
2. From the drop-down list, click on Force Quit…
3. When Force Quit Applications window appears, select Safari and click Force Quit button.
4. On your keyboard, Press and Hold Shift key and open Safari browser. This will launch Safari in clean state and blank new tab window.

Procedures to Remove "Your system is infected with viruses" from Mac

This section contains comprehensive guide for Mac users. It will help you remove malicious browser hijacker from internet application.

Procedures on this page are written in a manner that can be easily understand and execute by Mac users.

Quick Fix - Scan the System with Combo Cleaner

Combo Cleaner is a trusted Mac utility application with complete antivirus and optimization features. It is useful in dealing with adware, malware, and PUP's. Moreover, it can get rid of malicious browser hijacker like "Your system is infected with viruses". You may need to purchase full version if you require to maximize its premium features.

1. Download the tool from the following page:

2. Double-click the downloaded file and proceed with the installation.

3. In the opened window, drag and drop the Combo Cleaner icon onto your Applications folder icon.

Install Combo Cleaner

4. Open your Launchpad and click on the Combo Cleaner icon.

5. Wait until antivirus downloads its latest virus definition updates and click on "Start Combo Scan" to start removing "Your system is infected with viruses".

Combo Cleaner Scanner

6. Free features of Combo Cleaner include Disk Cleaner, Big Files finder, Duplicate files finder, and Uninstaller. To use antivirus and privacy scanner, users have to upgrade to a premium version.

Proceed with the rest of the removal steps if you are comfortable manually removing malicious objects associated with the threat.

Step 1 : Double-check with MBAM Tool for Mac

1. Download Malwarebytes Anti-malware for Mac from the link below.

2. Run Malwarebytes Anti-malware for Mac. It will check for updates and download if most recent version is available. This is necessary in finding recent malware threats including "Your system is infected with viruses".

3. If it prompts to close all running web browser, please do so. Thus, we advise you to PRINT this guide for your reference before going offline.

4. Once it opens the user interface, please click on Scan button to start scanning your Mac computer.

MBAM for Mac

5. After the scan, Malwarebytes Anti-malware for Mac will display a list of identified threats, "Your system is infected with viruses" is surely part of it. Be sure to select all items in the list. Then, click Remove button to clean the computer.

Check if your internet browser application is no longer being bothered by "Your system is infected with viruses". If the browser hijacker still persists, please continue with the steps below to reset internet programs to default settings.

Step 2 : Reset Internet Browser Program

Cleaning your internet browser from clutter and unwanted add-on/extension is a must when dealing with "Your system is infected with viruses" fake alert. The procedure below discuss on resetting various browsers to its default state.

Clear the Safari Internet Browser (Mac)

1. Open your Safari browser application.
2. In the Safari menu, click on Preferences from the drop-down list.
3. On Preferences window, please select the Privacy tab.
4. Click on Manage Website Data button.
5. Select unwanted/suspicious entry and click the Remove button. If you choose to Remove All, you may be logout from most visited websites and online services. Therefore, we advise to remove suspicious item one at a time to prevent changing behavior towards your favorite websites.
6. If it prompts, please confirm your actions.

7. Next, we will need to clear the Cache. Back at the Safari Preferences window, choose Advanced tab.
8. Navigate to the bottom and activate Show Develop menu in menu bar.
9. Go to Safari menu, choose on Develop from the drop down list and click on on Empty Caches.
10. Next thing to do is to restore the Homepage to your preference and remove the one from "Your system is infected with viruses" fake alert.
11. Back at the Safari Preferences window, click on General tab.
12. Under Homepage section, type your desired URL to be the default start-up page.
13. Lastly, make sure to have the right Search Engine.
14. Go back to Safari Preferences window and click on Search tab.
15. Select your desired Search tool under the Search engine section.
16. You may not restart Safari browser.

Restore Google Chrome to Default Settings

Resetting Google Chrome to default settings is helpful in deleting hard-to-remove extension that produces the "Your system is infected with viruses" scam alert. This method is highly advisable to perform if you have difficulty in removing unwanted extension.

1. Open Google Chrome Internet browser.
2. On the address bar, type chrome://settings/reset and press Enter key.
3. Under Reset and clean up section, choose Restore settings to their original defaults.
4. Click Reset settings button to clear all entries related to "Your system is infected with viruses" scam pop-up.
5. Close the existing tab and restart Google Chrome. That should have removed "Your system is infected with viruses" extension and associated objects.

Reset Mozilla Firefox to Default

This section describes how to remove unwanted extension from Firefox that may be related to "Your system is infected with viruses" fake pop-up alert. This process can fix many browser issues by restoring Firefox to factory settings without affecting your essential information (bookmarks, browsing history, passwords, and Internet cookies) on the browser. If you desire to remove only specific extension, please see manual removal of add-on from Firefox.

1. Input the string about:support on Firefox web address and press Enter on keyboard.
2. You will now see the Troubleshooting Information page of Mozilla Firefox.
3. You will notice a section on upper-right corner of the screen stating Give Firefox a tune up. Click the Refresh Firefox button.
4. If confirmation window appears, click Refresh Firefox to continue.
5. Firefox browser will close and start the resetting process. When done, it will display a list of restored data. "Your system is infected with viruses" fake alert should be gone by now. Click Finish to open a fresh version of Firefox.

About the author

Leave a Comment

Your email address will not be published. Required fields are marked *