Mcafee adware notifications

[Old MacBook user]

Hi, I have a MacBook Pro 15" (mid 2012) with Catalina version 10.15.7 . While on internet Mcafee installed a notification that says antivirus has expired. Owned computer since new. Have never had Mcafee. Nowhere in computer can a Mcafee file be found. Apple support worked with me for over an hour yesterday. Could not remove. Tech to call back today. I called. Supervisor said now they can't help because computer is too old. Yesterday they were literally in my system trying to fix it. It seems to me that since I am using a fairly current OS that it would benefit them to fix it regardless of my computer's age, since Mcafee has found a way to infiltrate their OS. I can turn notifications off and it is blocked. Otherwise it turns up every time I open Safari. About every 30 seconds to a minute. I have Malwarebytes. It does not recognize it. It doesn't seem to bother anything but it doesn't belong and I want it out of my laptop. I am thankful for any help.

 

[Slydude]

Give this a quick read. I think it will clear things up. It covers removal from several browsers on Mac, PC, and IOS, so focus on the sections relevant to your situation. How to remove fake Mcafee Virus Popup Scam.

You don't need to download the mentioned software; follow the directions.

 

[Lifeisabeach]

Since this was obviously a scam, I have to ask: are you SURE it was Apple who worked with you? Did you pay anything or fork over any credit card information?

 

[Slydude]

That's a good question, LB. I didn't think of that possibility.

 

[Rod]

Just how did Apple get to be "literally in my system trying to fix it"? If you were told to install Autodesk or any remote access type application that sure sounds like a scam. Where did you get the number for Apple Support?

 

[chscag]

Let's not jump to conclusions. Re-read his first post carefully and you can understand that he actually contacted Apple. Otherwise why would a supervisor tell him the machine was too old for them to help him with it? Would a scammer say that? I think not.

Also Apple has software that they can use for remote access to your machine. I have had them do that with me when I asked for help. They do ask your permission first.

Happy New Year wherever you are!

 

[Old MacBook user]

Since this was obviously a scam, I have to ask: are you SURE it was Apple who worked with you? Did you pay anything or fork over any credit card information?

I contacted Apple support directly through Apple programs in computer. When I say they were "in my computer" I mean they could see my screen and guided me with their red arrow. I had a similar issue before with an antivirus that I installed and when I chose not to renew and removed program, I still had a persistent pop-up that I couldn't remove. They removed it with my help. (guiding with the red arrow)

 

[Old MacBook user]

Let's not jump to conclusions. Re-read his first post carefully and you can understand that he actually contacted Apple. Otherwise why would a supervisor tell him the machine was too old for them to help him with it? Would a scammer say that? I think not.

Also Apple has software that they can use for remote access to your machine. I have had them do that with me when I asked for help. They do ask your permission first.

Happy New Year wherever you are!

That is exactly what happened. And happy New Year to you!

 

[Old MacBook user]

Since this was obviously a scam, I have to ask: are you SURE it was Apple who worked with you? Did you pay anything or fork over any credit card information?

Yes it was Apple.

 

[Old MacBook user]

Give this a quick read. I think it will clear things up. It covers removal from several browsers on Mac, PC, and IOS, so focus on the sections relevant to your situation. How to remove fake Mcafee Virus Popup Scam.

You don't need to download the mentioned software; follow the directions.

I'm gonna try it now. Thanks...

 

[Old MacBook user]

Give this a quick read. I think it will clear things up. It covers removal from several browsers on Mac, PC, and IOS, so focus on the sections relevant to your situation. How to remove fake Mcafee Virus Popup Scam.

You don't need to download the mentioned software; follow the directions.

Just tried their recommendations. Pop-ups returned immediately after notifications turned back on. Only notification I left in was system notification. I assume it is genuine and figured if I removed it, I would not get update notifications from Apple. Coincidently all 3 of these flags that pop up have the same system preferences icon (set of gears) that Apple uses. The flags appear in upper right corner and read exactly as follows. 1st, your McAfee has expired. click here to renew. 2nd, turn on your antivirus. click here to run McAfee. 3rd, Alert your antivirus has expired. Under applications there are none that were installed 12/27/21, the day they started. I am not tech savvy but I believe it must be hiding in an unrelated file somehow. Stealthy enough to evade Apple support. All I know is that I will keep on it until it's removed. Im not going to be hijacked. One more footnote. when support was in computer he took me to an area that showed history of all programs ever installed. (old printers, etc.) Nowhere was McAfee ever installed. Thanks again...

 

[Old MacBook user]

Maybe this will help someone crack the code. If I click on one of the flags, a screen comes up that has McAfee logo and a square to click to subscribe. Also some greatly reduced price gimmick with a timer running. The address in the address bar is (scan-mypc.xyz) and at the bottom of the square it says "advertisement by independent affiliate of McAfee 460ccwh8p5mkt283" . Anybody ever seen something like this?

 

[Lifeisabeach]

Maybe this will help someone crack the code. If I click on one of the flags, a screen comes up that has McAfee logo and a square to click to subscribe. Also some greatly reduced price gimmick with a timer running. The address in the address bar is (scan-mypc.xyz) and at the bottom of the square it says "advertisement by independent affiliate of McAfee 460ccwh8p5mkt283" . Anybody ever seen something like this?

Have you tried DetectX? It’s great for removing adware. And it’s free!

 

[Old MacBook user]

Have you tried DetectX? It’s great for removing adware. And it’s free!

Here's an update. I'm randomly looking around at anything that would seem related. I found that web address (scan-mypc.xyz) in autoplay but it was listed as denied. I removed it anyway. Made no difference. Flags came right back. Then I went back to notifications and denied system notifications. The flags stopped immediately and have not returned for over an hour. This leads me to believe that it's hiding in that file. The Apple support guy said that Apple has "safe mode" like windows. I wonder if I could go in that way and remove file. Then I would get my update notifications from Apple instead of checking for them manually. I don't know how to enter safe mode on a Mac. It may be silly but I don't like installing any free antivirus programs. I just feel like they must have some hidden agenda. What are your thoughts???

 

[IWT]

@Old MacBook user

I don't think anyone has suggested this yet, or I've missed it. Try this:

Remove/close out of any connection to the Internet. As it's a MBPro, turn off WiFi. Now, with no possible way the internet can interfere:

Open safari. Click on "History" in the top Menu Bar" and the choose "Clear History". This will do just that. No record of past internet connections.

Then Open Safari Preferences (Keyboard shortcut is Command plus comma or click on Safari icon > Preferences). Click on "Advanced" in the far right of the menu bar. Now, Tick the box: "Show Develop menu in menu bar"

Come out of preferences. On your top menu bar in Safari, you will see "Develop". Click on it. About half way down the long list of options is: "Empty Caches". Click on that.

Lastly: Open Safari Preferences again. Click on Privacy. Then Click on "Manage Website Data". Click on "Remove All". That removes ALL cookies.

What we have done is clear all cookies, caches and history from Safari because somewhere in there are files, scripts or similar which keep linking you to the MacAfee scam site.

Now reboot your Mac. Then reconnect to the Internet.

NB These actions mean that you will have to re-login to sites like Amazon, FB etc. And it's a nuisance losing your History etc. But I think this may be the only way to get rid of that scam.

Ian

 

[Old MacBook user]

@Old MacBook user

I don't think anyone has suggested this yet, or I've missed it. Try this:

Remove/close out of any connection to the Internet. As it's a MBPro, turn off WiFi. Now, with no possible way the internet can interfere:

Open safari. Click on "History" in the top Menu Bar" and the choose "Clear History". This will do just that. No record of past internet connections.

Then Open Safari Preferences (Keyboard shortcut is Command plus comma or click on Safari icon > Preferences). Click on "Advanced" in the far right of the menu bar. Now, Tick the box: "Show Develop menu in menu bar"

Come out of preferences. On your top menu bar in Safari, you will see "Develop". Click on it. About half way down the long list of options is: "Empty Caches". Click on that.

Lastly: Open Safari Preferences again. Click on Privacy. Then Click on "Manage Website Data". Click on "Remove All". That removes ALL cookies.

What we have done is clear all cookies, caches and history from Safari because somewhere in there are files, scripts or similar which keep linking you to the MacAfee scam site.

Now reboot your Mac. Then reconnect to the Internet.

NB These actions mean that you will have to re-login to sites like Amazon, FB etc. And it's a nuisance losing your History etc. But I think this may be the only way to get rid of that scam.

Ian

Just tried some of your suggestions. I clear my history every time I'm on line. A few years ago I was following a few auctions on eBay. I guess I stayed signed in. Long story short, my internet speed slowed down to a crawl. Turns out it was because my history was so full. So ever since, I clear it after every session. Moving on. I found the caches but did not do the mass empty because I could not see them individually. Then I opened preferences and "manage website data". I removed several that I did not want or recognize. One of them being the (scan-mypc.xyz) web address that is causing this whole ordeal. then I went to preferences then notifications. Now I have no notifications. The system notification that had the "Apple" icon (with the set of gears) is now gone. Earlier I left it in but denied notification because I thought it might have been authentic. Looks like they were using a familiar symbol to fake authenticity. It worked! I was hesitant to delete it in case it was real. Maybe if it was real, it would not have let me get rid of it anyway like a lot of other core programs.( I never use Siri but I can't delete it) Anyway, It hasn't come back so far. I'm going to back out of everything and go back on web. If I do not post again tonite it's fixed.
Thanks to all of you for your help. I think Ian nailed it...

Mike...
(Western Kentucky,USA)

 

[Rod]

I can understand your hesitancy about installing anti malware applications but there are two that these forums recommend FYI.
DetectX Swift from Sqwarq and Intego VirusBarrier Scanner (bit of a misnomer because there are no real Mac viruses but people understand the term) in real fact it does a good job of scanning for malware of all sorts and is available from the App Store.
You really only need to run either of them occasionally eg. monthly or if you suspect a malware problem.
Neither run in the background or have helper apps but they do need to occasionally download malware updates.
They are both "stand alone" apps easily uninstalled by dragging to the Trash.

 

[Old MacBook user]

I can understand your hesitancy about installing anti malware applications but there are two that these forums recommend FYI.
DetectX Swift from Sqwarq and Intego VirusBarrier Scanner (bit of a misnomer because there are no real Mac viruses but people understand the term) in real fact it does a good job of scanning for malware of all sorts and is available from the App Store.
You really only need to run either of them occasionally eg. monthly or if you suspect a malware problem.
Neither run in the background or have helper apps but they do need to occasionally download malware updates.
They are both "stand alone" apps easily uninstalled by dragging to the Trash.

I won't swear to it but I believe Intego is the one I had previously subscribed to and when I declined to renew subscription they installed a relentless pop-up just like this last one. Even when I uninstalled the program. All I subscribe to now is Malwarebytes because it's the only one Apple endorses. Now that I have learned a few critical places to look in my Mac, I think that's all I will use. Again, what is in it for them? No company does anything for nothing. Just my jaded opinion from 57 years on this earth.
Thanks for the recommendation though...

 

[MacInWin]

Apple doesn't endorse software. Don't take the fact it may be present in the Mac App Store as an "endorsement." All it means is that it passes Apple's safety checks.

You don't need to subscribe to Intego to use VirusBarrier Scanner. It is free, and it does work well. And it doesn't nag for subscriptions, either. Nor does DetectX Swift.

Just my real life observations from 76 years on this earth.

 

[chscag]

Apple doesn't endorse software. Don't take the fact it may be present in the Mac App Store as an "endorsement." All it means is that it passes Apple's safety checks.

We have stated this numerous times and yet folks continue to believe that software in the Mac App Store or the iOS Store are endorsed by Apple.

The only software that Apple endorses is their own. As an example: Pages, Numbers, Keynote.