How to remove “YOUR APPLE DEVICE HAS A VIRUS” pop-up scam

What is “YOUR APPLE DEVICE HAS A VIRUS” pop-up scam

YOUR APPLE DEVICE HAS A VIRUS is a deceptive pop-up scam that targets unsuspecting Mac users, often surfacing while browsing the internet. This fraudulent alert claims that the device is infected with malware, specifically mentioning PEGASUS spyware, and urges the user to call a provided phone number for immediate assistance. Such warnings typically arise from malicious websites or potentially unwanted programs (PUPs), which infiltrate systems without consent, resulting in unwanted ads and reduced performance. Users are misled into believing their personal information, including banking details and passwords, is at risk, prompting them to engage with scammers posing as “certified technicians.” Unfortunately, this interaction can lead to further issues, such as unauthorized access to the victim’s device, installation of actual malware, or extortion through ransom demands. Ignoring these pop-ups is crucial, as they are designed solely to exploit users for financial gain. Quick actions to close the browser and remove any associated PUPs can help mitigate potential harm and safeguard personal data.

Why do I see “YOUR APPLE DEVICE HAS A VIRUS” pop-up continuously?

The “YOUR APPLE DEVICE HAS A VIRUS” message is a common scare tactic used by cybercriminals targeting Mac users through deceptive websites. This pop-up typically appears when users inadvertently click on malicious ads or are redirected by potentially unwanted programs (PUPs) that infiltrate their systems without consent. These PUPs often bundle with legitimate software, sneaking into a user’s Mac during the download process. Once active, they can generate intrusive pop-ups claiming that the user’s device is infected, pressuring them to call a fake support number for assistance. This tactic not only aims to extort money from unsuspecting victims but also opens the door for further exploitation, as attackers may request remote access to install additional malware. To avoid encountering such scams, users should exercise caution while browsing and ensure they are using reliable security software to detect and eliminate PUPs.

Remove “YOUR APPLE DEVICE HAS A VIRUS” pop-up manually for free

Remove suspicious applications from MacOS

To start removing “YOUR APPLE DEVICE HAS A VIRUS” pop-up you should uninstall unwanted programs from Applications in MacOS. Malware can be present by different names. It should uninstall correctly, however, we recommend you to use CleanMyMac to clean leftover items after uninstalling. Here are instructions for Mac.

Remove suspicious applications from Mac:

1. In the Finder sidebar, click Applications.
2. Find unknown or suspicious applications.
3. Drag icons of suspicious applications from the Applications folder to the Trash (located at the end of the Dock).
4. Then choose Finder > Empty Trash.

Cannot uninstall apps related to “YOUR APPLE DEVICE HAS A VIRUS” in MacOS

If you can’t uninstall suspicious apps from MacOS using instructions above, or it keeps coming back, you can use free AppCleaner for Mac to remove all residual data and libraries. Follow instructions below:

1. Download free AppCleaner.
2. Drag suspicious applications from Applications folder to AppCleaner window.
3. Choose files and folders you want to remove along with suspicious applications.
4. Click Delete button.

Disable push notifications from suspicious websites in browsers in MacOS

Remove suspicious websites, allowed to show push-notifications in Safari

1. Open Safari, and in the top menu click Safari, choose Preferences.
2. In the Preferences window, click on Websites tab.
3. On the left side, choose Notifications. You will see the list of websites and their settings for showing notifications.
4. Find suspicious ones in the list and click Remove button.

Remove suspicious websites, allowed to show push-notifications in Google Chrome

1. Go to Google Chrome settings, by clicking 3-dots icon in the top-right corner and choosing Settings.
2. On the left side choose Privacy and security menu.
3. Under opened Privacy and security tab, choose Site Settings.
4. Scroll down to Permissions section and click on Notifications (with the bell icon).
5. Go to the bottom list of sites named Allowed to send notifications.
6. Find suspicious ones in the list and click 3-dots icon near it. Click Remove button to delete the website permission.

Remove suspicious websites, allowed to show push-notifications in Mozilla Firefox

1. Go to Mozilla Firefox options, by clicking 3-bars icon in the top-right corner and choosing Settings.
2. On the left panel choose Privacy & Security menu.
3. Scroll down to Permissions section.
4. Near Notifications click Settings… button.
5. Find suspicious ones in the list and click Remove Website to remove it.
6. Click Save Changes button to confirm the action.

Remove malicious add-ons from your browsers

Uninstalling apps related to “YOUR APPLE DEVICE HAS A VIRUS” from Applications often does not bring the desired effect. It sometimes has a browser extension and it may still be active in Safari, Google Chrome, and Mozilla Firefox. Here are instructions on how to remove “”YOUR APPLE DEVICE HAS A VIRUS related extensions from your browsers manually.

Safari:

1. Start Safari on your Mac, click Safari to open drop-down menu and choose Preferences
2. Click Extensions tab.
3. Find suspicious extension.
4. Click Uninstall button to remove it.

Google Chrome:

1. Start Google Chrome browser
2. In address box type (or copy-paste) chrome://extensions.
3. Find suspicious or unwanted extension.
4. Click the Remove button to remove them.
5. Also remove other suspicious extensions from the list.

Mozilla Firefox:

1. Start Mozilla Firefox browser.
2. In address box type (or copy-paste) about:addons.
3. Find suspicious or unwanted extension.
4. Click three-dots icon near it and choose Remove in the menu.
5. In opened dialog window click Remove button to confirm the action.
6. Remove all suspicious extensions from the list.

How to block ads and pop-ups, like “YOUR APPLE DEVICE HAS A VIRUS”

AdGuard main window

AdGuard general settings

AdGuard browser assistant

Malicious push-notifications, in most cases, are caused by a program installed on your PC or an add-on installed in browsers. However, sometimes it can appear on a clean computer when visiting a malicious website, using an advertising script. Also, apps that generate “YOUR APPLE DEVICE HAS A VIRUS” pop-up are themselves installed from other pop-ups. To protect your Mac and browsers from phishing websites, pop-up ads, banners, malicious scripts it is recommended to use AdGuard. Download free trial here: