Remove Pop-up Scam

Remove Pop-up Scam


What is page? How does work? Is a virus or a scam? How to remove from your Mac? is a page that affects Mac devices in an attempt to make users believe that their Mac systems are infected with viruses. In the event that you see pop-up in your browser you should ignore it as the presented information is false. This page is a typical scam that promotes an unwanted application called Cleanup My Mac. If you want to remove this pop-up scam from your Mac and stop seeing it, we suggest that you follow the removal steps presented in this guide.

Threat Summary Scam
TypeScam, PUP
Short DescriptionQuestionable website that hijacks your preferred web browser and presents misleading infromation.
SymptomsAims to trick victims into downloading rogue software for Mac by claiming their device has a virus.
Distribution MethodFreeware Installations, Bundled Packages, Corrupted Websites
Detection Tool See If Your System Has Been Affected by Scam


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Scam. Pop-up – Spread and Impact

The domain is a website which fraudsters use for the spread of a rogue application called Cleanup My Mac. The website tends to affect popular web browsers (Chrome Safari, Firefox, etc.) used on Mac devices. Once the loads in the browser, it displays the following message:


The text message depicted in the image reads:

Your system is infected with (3) viruses!

Your Mac is infected with 3 viruses. Our security check found traces of 2 malware and 1 phishing/spyware.
Immediate removal required!
The immediate removal of the viruses is required to prevent further system damage, loss of Apps, Photos or other files.
Traces of 1 phishing/spyware were found on your Mac with OS x 10.12.
Personal and banking information are at risk.
To avoid more damage click on ‘Scan Now‘ immediately. Our deep scan will provide help immediately!
1 minute and 57 seconds remaining before damage is permanent.

Soon after you see the above message, the generates a pop-up that presents additional information:


We have detected a Trojan virus (e.tre456_worm_osx) on your Mac.
Press OK to begin the repair process.

We know that this information is scary but beware pop-up is a typical scam. Just like

e.tre456_worm_osx Mac scam and redirect virus the pop-up scam loads in the browser with the goal to make you believe that you need to download and purchase a hoax system cleaner. So be advised to avoid interacting with the content presented by this website.

As of the reason why your preferred web browser keeps redirecting you to scamming website, it is most likely a

potentially unwanted program that has managed to land on your Mac against your will.

Such programs are usually spread via the installers of various free and supposedly useful applications. Unfortunately, while installing a desired app that has a compromised installer you could easily miss the presence of added extras and unnoticeably agree with their installation. Happily, in some cases, you could prevent unwanted programs from accessing your Mac by reviewing the Advanced/Custom configuration setup step. Oftentimes, this step presents details that may help you notice the PUP and opt out its installation on time.

When such a program is running on your Mac, you may also register significant slowdowns. They usually occur as a result of many annoying online advertisements that are generated in the affected browser. Similar to scam, these ads are likely to display misleading offers that land on poorly secured or deceitful websites.

How to Remove Pop-up Scam on Mac

In order to remove pop-up along with all associated files that enable its appearance in the browser, you should complete several removal steps. In the guide below you will find all removal steps in their precise order. You could choose between manual and automatic removal approaches. In order to fully get rid of all present undesired programs and improve macOS security, we recommend that you combine the steps. Have in mind that the names of all present infection files associated with this browser infection may differ the name of the redirect.

In case you have further questions or need additional help with the removal process, don’t hesitate to leave a comment. We will be glad to get in touch with you.

Gergana Ivanova

Gergana Ivanova

Gergana has completed a bachelor degree in Marketing from the University of National and World Economy. She has been with the STF team for four years, researching malware and reporting on the latest infections.

More Posts

Follow Me:
Google Plus

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share