Immediately Call Apple Support Scam (Mac)

Also Known As: Warning Virus Detected! Scam
Type: Adware
Distribution: Moderate
Damage level: Medium

How to remove Immediately Call Apple Support from Mac?

What is Immediately Call Apple Support?

"Immediately Call Apple Support" is a fake error message displayed by a malicious exploit. This exploit is hosted on various websites, which are promoted via spam emails that encourage users to visit certain URLs. Following a visit one of these websites, an exploit runs new tasks until the computer freezes. A fake error message is then displayed.

Immediately Call Apple Support adware

There are two variants of this exploit. The first targets computers running the OS X 10.10 (Yosemite) operating system. This variant continually opens new email message windows via the default Mac mail application. Following the opening of a certain number of active windows, the system runs out of memory and, therefore, freezes. The second targets computers running the OS X 10.11 (El Capitan) and OS X 10.12 (Sierra) operating systems. This  variant opens an iTunes application and repeatedly emulates the clicking of an iTune link, thus leading the Mac to a state of Denial of Service, which also results in a system freeze. Once the system has stopped responding, the exploit displays a fake error message stating that the system is infected and that the user's private details (credit card information, email and other account passwords, etc.) are at risk. To remove the infection, victims must supposedly contact "Apple Customer Support" via a telephone number ("1-800-876-6855") provided. Be aware, however, that this is a scam. There is no such infection . This error is merely an attempt to scare and trick victims into calling and paying for services that are not needed. You should ignore this error message and never open any of these sites again.

"Immediately Call Apple Support" shares similarities with many other fake errors such as Mac Detected TAPSNAKE infection and MAC Malware Warning Alert ! All claim that the system is infected, missing files, or corrupted/damaged in other similar ways, however, as with "Immediately Call Apple Support", these errors are also attempts to scam victims. You should never trust these viruses.

How did Immediately Call Apple Support install on my computer?

Fake errors are often distributed with adware-type applications that offer various 'useful features'. Cyber criminals proliferate these apps using a deceptive marketing method called "bundling" - stealth installation of third party software with regular applications. Developers know that users often rush the download/installation processes and skip most steps. Therefore, bundled programs are concealed within the "Custom/Advanced" settings. By skipping this section, users expose their systems to risk of various infections and compromises their privacy. Fake errors might also be distributed via fake software updates, trojans, spam emails (malicious attachments), and third party software download sources (peer-to-peer networks, freeware download websites, etc.)

How to avoid installation of potentially unwanted applications?

To prevent this situation, be cautious when downloading/installing software. Closely analyze each download/installation step using the "Custom" or "Advanced" settings. Furthermore, never accept offers to download/install additional applications and cancel those already included. You should use a legitimate anti-virus/anti-spyware suite and keep your installed applications up-to-date. In addition, never open files received from suspicious emails or download any software from unofficial sources. The key to computer safety is caution.

Exploit displaying a fake error message via the default Mac mail app:

Warning Virus Detected! Immediately Call Apple Support +1-800-876-6855. Your credit card details and banking information.Your e-mail passwords and other account passwords.Your Facebook, Skype, AIM, ICQ and other. Call Apple Support +1-800-876-6855. Your private photos, family photos and other sensitive files.Your webcam could be accessed remotely by stalkers with a VPN virus.

Websites that host "Immediately Call Apple Support" exploits (never visit these sites):

safari-get(.)com; safari-get(.)net; safari-serverhost(.)com; safari-serverhost(.)net

To close new mail windows opened by the exploit, you can use "Force Quit Applications" (opened by pressing CTRL+ALT+ESC). Users must close Safari and Mail applications:

How to close newly opened mail windows

Quick menu:

Video showing how to remove adware and browser hijackers from a Mac computer:

Adware removal:

Remove Immediately Call Apple Support-related potentially unwanted applications from your "Applications" folder:

mac adware removal from applications folder

Click the Finder icon. In the Finder window, select “Applications”. In the applications folder, look for “MPlayerX”,“NicePlayer”, or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.


Download remover for Warning Virus Detected! Scam
1) Download and install   2) Run system scan   3) Enjoy your clean computer!

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Reimage.

Remove warning virus detected! scam related files and folders:

Finder go to folder command

Click the Finder icon, from the menu bar. Choose Go, and click Go to Folder...

step1Check for adware-generated files in the /Library/LaunchAgents folder:

removing adware from launch agents folder step 1

In the Go to Folder... bar, type: /Library/LaunchAgents

removing adware from launch agents folder step 2
In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.

step2Check for adware generated files in the /Library/Application Support folder:

removing adware from application support folder step 1

In the Go to Folder... bar, type: /Library/Application Support

removing adware from application support folder step 2
In the “Application Support” folder, look for any recently-added suspicious folders. For example, “MplayerX” or “NicePlayer”, and move these folders to the Trash.

step3Check for adware-generated files in the ~/Library/LaunchAgents folder:

removing adware from ~launch agents folder step 1


In the Go to Folder bar, type: ~/Library/LaunchAgents

removing adware from ~launch agents folder step 2

In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.

step4Check for adware-generated files in the /Library/LaunchDaemons folder:

removing adware from launch daemons folder step 1
In the Go to Folder... bar, type: /Library/LaunchDaemons

removing adware from launch daemons folder step 2
In the “LaunchDaemons” folder, look for recently-added suspicious files. For example “com.aoudad.net-preferences.plist”, “com.myppes.net-preferences.plist”, "com.kuklorest.net-preferences.plist”, “com.avickUpd.plist”, etc., and move them to the Trash.

After removing files and folders generated by the adware, continue to remove rogue extensions from your Internet browsers.

Warning Virus Detected! Scam removal from Internet browsers:

safari browser iconRemove malicious extensions from Safari:

Remove warning virus detected! scam related Safari extensions:

safari browser preferences

Open Safari browser, from the menu bar, select "Safari" and click "Preferences...".

safari extensions window

In the preferences window, select "Extensions" and look for any recently-installed suspicious extensions. When located, click the "Uninstall" button next to it/them. Note that you can safely uninstall all extensions from your Safari browser - none are crucial for normal browser operation.

  • If you continue to have problems with browser redirects and unwanted advertisements - Reset Safari.

firefox browser iconRemove malicious plug-ins from Mozilla Firefox:

Remove warning virus detected! scam related Mozilla Firefox add-ons:

accessing mozilla firefox add-ons

Open your Mozilla Firefox browser. At the top right corner of the screen, click the "Open Menu" (three horizontal lines) button. From the opened menu, choose "Add-ons".

removing malicious add-ons from mozilla firefox

Choose the "Extensions" tab and look for any recently-installed suspicious add-ons. When located, click the "Remove" button next to it/them. Note that you can safely uninstall all extensions from your Mozilla Firefox browser - none are crucial for normal browser operation.

  • If you continue to have problems with browser redirects and unwanted advertisements - Reset Mozilla Firefox.

chrome-browser-iconRemove malicious extensions from Google Chrome:

Remove warning virus detected! scam related Google Chrome add-ons:

removing malicious google chrome extensions step 1

Open Google Chrome and click the "Chrome menu" (three horizontal lines) button located in the top-right corner of the browser window. From the drop-down menu, choose "More Tools" and select "Extensions".

removing malicious Google Chrome extensions step 2

In the "Extensions" window, look for any recently-installed suspicious add-ons. When located, click the "Trash" button next to it/them. Note that you can safely uninstall all extensions from your Google Chrome browser - none are crucial for normal browser operation.

  • If you continue to have problems with browser redirects and unwanted advertisements - Reset Google Chrome.