This Mac Is Not Secure POP-UP Scam (Mac)

Also Known As: "This Mac is Not Secure" virus
Type: Mac Virus
Distribution: Low
Damage level: Medium

How to remove "This Mac is Not Secure" from Mac?

What is "This Mac is Not Secure"?

"This Mac is Not Secure" is a fake alert message indicating that the Mac computer is not secure and is infected with spyware (a form of malicious software). Typically, these fake alerts are displayed on untrustworthy and deceptive websites that users visit unintentionally - they are redirected to them by installed potentially unwanted applications (PUAs) that deliver intrusive advertisements and record data relating to browsing habits and other details.

This Mac is Not Secure scam

Scammers who designed "This Mac is Not Secure" claim that the computer (Mac) is infected with malicious software that steals personal and financial information. They state that this has happened due to a 'security breach' ("misconfigured connection") or an "attacker" that has compromised the user's internet connection. Scammers claim to be "Apple Help Desk" and urge visitors to this deceptive website to contact a free helpline (telephone number: "+1-800-307-2412"). They also give the impression that leaving this deceptive website and not contacting them might result in further computer damage, data/financial loss, and so on. Note that Apple and its support team has nothing to do with this. Scammers who design these fake virus alert messages often use the names of well-known companies to trick people into believing that their scams are legitimate and that the people behind them can be trusted. When contacted, they try to trick users into purchasing software that will supposedly fix computer problems, clean viruses, and so on. They might also encourage users to pay for remote technical guidance/services. "This Mac is Not Secure" and other similar fake alert message should never be trusted. The best thing to do in these cases is to simply ignore them by closing the deceptive website. If it prevents you from closing it, use the Activity Monitor and force-quit the entire browser process. Do not restore the closed session, since this will return you to the same deceptive website, or the website that led you there in the first place.

Users often arrive at these deceptive websites due potentially unwanted apps that they have install unintentionally. PUAs cause redirects to untrustworthy websites, deliver intrusive advertisements, and gather browsing-related (and other) data. Intrusive ads are often coupons, banners, surveys, pop-ups, and so on. PUAs display them by employing tools that enable placement of third party graphical content on any site. Therefore, they conceal underlying content of any visited website and, if clicked, redirect users to deceptive/untrustworthy websites or even execute scripts designed to download/install unwanted apps, possibly malware. PUAs also gather browsing-related data such as keystrokes, search queries, URLs of visited websites, IP addresses, etc. The collected data might also include personal/sensitive details. Developers of these information tracking PUAs share all recorded data with third parties (potentially, cyber criminals) who misuse it to generate revenue. These actions put users at risk of privacy/browsing safety issues or even identity theft.

Threat Summary:
Name"This Mac is Not Secure" virus
Threat TypeMac malware, Mac virus
SymptomsYour Mac became slower than normal, you see unwanted pop-up ads, you get redirected to shady websites.
Distribution methodsDeceptive pop-up ads, free software installers (bundling), fake flash player installers, torrent file downloads.
DamageInternet browsing tracking (potential privacy issues), displaying of unwanted ads, redirects to shady websites, loss of private information.
Removal

To eliminate This Mac is Not Secure virus our malware researchers recommend scanning your computer with Combo Cleaner.
▼ Download Combo Cleaner
Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Combo Cleaner.

The internet is full of deceptive websites of this type (that display fake virus, errors, and other messages). Some examples include Your MacOS 10.12 Sierra Is Infected With 3 Viruses, Spyware Were Found On Your Mac, and Error FXX000. Typically, scammers behind these fake virus alert and other websites attempt to trick people into contacting them and purchasing products and services that are unnecessary. All PUAs are very similar and promoted as 'useful' apps, however, they provide none of the functionality promised. Developers often trick people into downloading and installing them simply to generate revenue.

How did potentially unwanted applications install on my computer?

Potentially unwanted apps often have official websites from which users can find and download them, however, most are installed by users inadvertently when developers use a deceptive marketing method called "bundling" or through intrusive ads. Bundling is used to trick users into stealth installation of unwanted apps together with regular software (often ad-supportive or free). Developers hide these bundled/unwanted apps in "Custom", "Advanced" and other options/settings of the installation or download set-ups. In summary, information about bundled apps is not properly disclosed and, thus, users who skip download/installation steps and leave settings unchanged, inadvertently install unwanted apps.

How to avoid installation of potentially unwanted applications?

Avoid using third party software downloaders/installers, peer-to-peer networks, and other similar sources to download software. You are advised to download software using official and trustworthy sources only. Never skip installation (or download) steps without first checking "Custom/Advanced" settings. Deselect offers to download or install additional apps and only then finish the procedure. Furthermore, avoid clicking untrustworthy ads, especially when visiting suspicious web pages. Many ads redirect users to dubious websites (gambling, pornography, adult dating, etc.). If you notice ads of this type or redirects to untrustworthy websites caused by them, check your browser for unknown/unwanted extensions, plug-ins, and add-ons, and remove all unknown or suspicious entries. The same applies to programs installed on your computer. If your computer is already infected with PUAs, we recommend running a scan with Combo Cleaner Antivirus for macOS to automatically eliminate them.

Appearance of "This Mac is Not Secure" scam (GIF):

Appearance of This Mac is Not Secure scam (GIF)

Text presented in a deceptive website that promotes "This Mac is Not Secure" scam:

Call Apple Help Desk: +1-800-307-2412
This Mac is Not Secure
This Spyware may be impersonating "Administrator" to steal your personal or financial information. You should contact to Apple Certified Technicians at Toll Free Helpline: +1-800-307-2412 You should go back to the previous page.
Safari warns you when a Spyware cause security breach. This may happen if the connection is misconfigured or an attacker has compromised your connection.
To learn more, you can visit this website. If you understand the risk involved, you should call Toll Free Helpline: !-800-307-2412

Instant automatic removal of This Mac is Not Secure virus: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of This Mac is Not Secure virus. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner for Mac By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Combo Cleaner.

Quick menu:

Video showing how to remove "This Mac Is Not Secure" pop-up scam using Combo Cleaner:

Potentially unwanted applications removal:

Remove potentially unwanted applications from your "Applications" folder:

mac browser hijacker removal from applications folder

Click the Finder icon. In the Finder window, select "Applications". In the applications folder, look for "MPlayerX", "NicePlayer", or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.

Remove "this mac is not secure" virus related files and folders:

Finder go to folder command

Click the Finder icon, from the menu bar. Choose Go, and click Go to Folder...

step1Check for adware-generated files in the /Library/LaunchAgents folder:

removing adware from launch agents folder step 1

In the Go to Folder... bar, type: /Library/LaunchAgents

removing adware from launch agents folder step 2
In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.

step2Check for adware generated files in the /Library/Application Support folder:

removing adware from application support folder step 1

In the Go to Folder... bar, type: /Library/Application Support

removing adware from application support folder step 2
In the “Application Support” folder, look for any recently-added suspicious folders. For example, “MplayerX” or “NicePlayer”, and move these folders to the Trash.

step3Check for adware-generated files in the ~/Library/LaunchAgents folder:

removing adware from ~launch agents folder step 1


In the Go to Folder bar, type: ~/Library/LaunchAgents

removing adware from ~launch agents folder step 2

In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.

step4Check for adware-generated files in the /Library/LaunchDaemons folder:

removing adware from launch daemons folder step 1
In the Go to Folder... bar, type: /Library/LaunchDaemons

removing adware from launch daemons folder step 2
In the “LaunchDaemons” folder, look for recently-added suspicious files. For example “com.aoudad.net-preferences.plist”, “com.myppes.net-preferences.plist”, "com.kuklorest.net-preferences.plist”, “com.avickUpd.plist”, etc., and move them to the Trash.

step 5 Scan your Mac with Combo Cleaner:

If you have followed all the steps in the correct order you Mac should be clean of infections. To be sure your system is not infected run a scan with Combo Cleaner Antivirus. Download it HERE. After downloading the file double click combocleaner.dmg installer, in the opened window drag and drop Combo Cleaner icon on top of the Applications icon. Now open your launchpad and click on the Combo Cleaner icon. Wait until Combo Cleaner updates it's virus definition database and click "Start Combo Scan" button.

scan-with-combo-cleaner-1

Combo Cleaner will scan your Mac for malware infections. If the antivirus scan displays "no threats found" - this means that you can continue with the removal guide, otherwise it's recommended to remove any found infections before continuing.

scan-with-combo-cleaner-2

After removing files and folders generated by the adware, continue to remove rogue extensions from your Internet browsers.

"This Mac is Not Secure" virus removal from Internet browsers:

safari browser iconRemove malicious extensions from Safari:

Remove "this mac is not secure" virus related Safari extensions:

safari browser preferences

Open Safari browser, from the menu bar, select "Safari" and click "Preferences...".

safari extensions window

In the preferences window, select "Extensions" and look for any recently-installed suspicious extensions. When located, click the "Uninstall" button next to it/them. Note that you can safely uninstall all extensions from your Safari browser - none are crucial for normal browser operation.

  • If you continue to have problems with browser redirects and unwanted advertisements - Reset Safari.

firefox browser iconRemove malicious plug-ins from Mozilla Firefox:

Remove "this mac is not secure" virus related Mozilla Firefox add-ons:

accessing mozilla firefox add-ons

Open your Mozilla Firefox browser. At the top right corner of the screen, click the "Open Menu" (three horizontal lines) button. From the opened menu, choose "Add-ons".

removing malicious add-ons from mozilla firefox

Choose the "Extensions" tab and look for any recently-installed suspicious add-ons. When located, click the "Remove" button next to it/them. Note that you can safely uninstall all extensions from your Mozilla Firefox browser - none are crucial for normal browser operation.

  • If you continue to have problems with browser redirects and unwanted advertisements - Reset Mozilla Firefox.

chrome-browser-iconRemove malicious extensions from Google Chrome:

Remove "this mac is not secure" virus related Google Chrome add-ons:

removing malicious google chrome extensions step 1

Open Google Chrome and click the "Chrome menu" (three horizontal lines) button located in the top-right corner of the browser window. From the drop-down menu, choose "More Tools" and select "Extensions".

removing malicious Google Chrome extensions step 2

In the "Extensions" window, look for any recently-installed suspicious add-ons. When located, click the "Trash" button next to it/them. Note that you can safely uninstall all extensions from your Google Chrome browser - none are crucial for normal browser operation.

  • If you continue to have problems with browser redirects and unwanted advertisements - Reset Google Chrome.