How to remove 'Apple Support Alert' from Mac?
What is 'Apple Support Alert'?
Identical to 'VIRUS ALERT FROM APPLE', 'Apple Support Alert' is a fake error message delivered by deceptive websites. Research shows that many users arrive at these sites inadvertently - they are redirected by potentially unwanted applications (PUAs) or intrusive advertisements displayed on other rogue sites. PUAs usually infiltrate systems without permission and, as well as causing directs, gather information and deliver intrusive ads.
The 'Apple Support Alert' error essentially states that the system is blocked for the following reasons: the computer is proliferating viruses; pirated software is being used; The Mac registration key is illegal, or; the computer is hacked or being used from an 'undefined' location. The pop-up is followed by a message encouraging users to contact Apple 'tech support' (via the '+86672265620' telephone number) to resolve all issues. In addition, the rogue site continually downloads a single file called 'This is a VIRUS.You computer is blocked', which itself is harmless and can be deleted without any consequences. Be aware, however, that 'Apple Support Alert' is fake and Apple is certainly not involved in this scam. In fact, cyber criminals attempt to trick gullible users into calling and paying for services (tech support) that are not required - the system is often safe and virus free. Therefore, you should ignore the 'Apple Support Alert' error and certainly do not call the aforementioned telephone number. You can remove this error simply by leaving the website. In some cases, rogue sites use scripts that disable closing of browsing tabs/windows. In these cases, terminate the browser using Activity Monitor or reboot the system. Do not restore the previous session, since you will end up re-opening the malicious websites.
Potentially unwanted applications continually gather information relating to browsing activity. Recorded data (IP addresses, search queries, keystrokes, pages viewed, URLs visited, and so on) usually includes personal details that are shared with third parties and misused to generate revenue. Therefore, information tracking can lead to serious privacy issues or even identity theft. Potentially unwanted applications are also notorious for display of intrusive advertisements. Ads are deployed using tools that enable placement of third party graphical content on any site. They often conceal underlying content, significantly diminishing the browsing experience. They might also redirect to malicious websites and execute scripts designed to download and install malware. Therefore, even a single accidental click can lead to system infections. Uninstall all potentially unwanted applications immediately.
Name | 'Apple Support Alert' virus |
Threat Type | Mac malware, Mac virus |
Symptoms | Your Mac became slower than normal, you see unwanted pop-up ads, you get redirected to shady websites. |
Distribution methods | Deceptive pop-up ads, free software installers (bundling), fake flash player installers, torrent file downloads. |
Damage | Internet browsing tracking (potential privacy issues), displaying of unwanted ads, redirects to shady websites, loss of private information. |
Malware Removal (Mac) | To eliminate possible malware infections, scan your Mac with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner for Mac To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available. |
The internet is full of fake error messages similar to 'Apple Support Alert' including 'Your Registration Key Is Blocked', 'Your Computer Is Permanently Blocked', and 'Your Mac Might Be Infected!' - these are just some examples from many. All claim that the system is damaged, however, these are merely attempts to extort money from unsuspecting users. Unwanted apps also share many similarities. By offering 'useful features', they attempt to give the impression of legitimacy, however, their only purpose is to generate revenue for the developers. Rather than enabling any features, unwanted apps pose a direct threat to your privacy and browsing safety.
The Problem: The equipment I wanted to combine is a Motu Microbook II external sound interface, 2 monitors and an LG DVD receiver (preferably connected via it's digital input), under Yosemite 10.10.5 OS. I mention the brands in case it matters. Swipey Rogue is Pac Man mashed up with Diablo! (give embedded web version 1 min to load) It was a mobile game, but now it's also totally free for desktop and browser.
How did potentially unwanted applications install on my computer?
Some unwanted applications have official download websites, however, due to the lack of knowledge and careless behavior of many users, unwanted apps often infiltrate systems without permission, since developers proliferate them using intrusive advertising and 'bundling' methods. 'Bundling' is stealth installation of unwanted apps with regular software. 'Bundled' apps are concealed within various sections of the download/installation processes. In addition, many users often rush these procedures, skip steps, and click various advertisements without understanding the possible consequences. This behavior often leads to inadvertent installation of rogue applications.
How to avoid installation of potentially unwanted applications?
To prevent this situation, be very cautious when browsing the internet and downloading/installing software. Study each step of the download/installation processes using the 'Custom' or 'Advanced' settings. Cancel offers to download or install additional software and deselect those already included. We recommend that you avoid using unofficial downloaders/installers, since most 'bundle' unwanted apps. Download software from official sources only, using direct download links. Remember that intrusive advertisements usually seem legitimate, since developers invest time and money into their design, however, most redirect to dubious websites, such as gambling, adult dating, pornography, and similar. If you encounter these redirects, immediately check the list of installed programs/browser plug-ins and eliminate any suspicious entries. The key to computer safety is caution. If your computer is already infected with PUAs, we recommend running a scan with Combo Cleaner Antivirus for macOS to automatically eliminate them.
Text presented in 'Apple Support Alert' scam:
VIRUS ALERT FROM APPLE
This computer is BLOCKED
Do not close this window and restart your computer
Your computer's registration key is Blocked.
Why we blocked your computer?
The mac's registration key is illegal.
This mac is using pirated software.
This mac is sending virus over the internet.
This mac is hacked or used from undefined location.
We block this computer for your security.
Contact apple helpline to reactivate your computer.
BLOCKED
Apple Support Alert
Your System Detected Some unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +86672265620
This computer is BLOCKED
Do not close this window and restart your computer
Your computer's registration key is Blocked.
Why we blocked your computer?
The mac's registration key is illegal.
This mac is using pirated software.
This mac is sending virus over the internet.
This mac is hacked or used from undefined location.
We block this computer for your security.
Contact apple helpline to reactivate your computer.
BLOCKED
Apple Support Alert
Your System Detected Some unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +86672265620
Appearance of 'Apple Support Alert' scam (GIF):
'This is a VIRUS.You computer is blocked' file downloaded by rogue websites that display 'Apple Support Alert' scam:
Another variant of 'Apple Support Alert' pop-up scam (uses +1-888-441-0333 phone number):
Text presented in the pop-up:
VIRUS ALERT FROM APPLE
This Mac computer is BLOCKED
Do not close this warning or restart your Mac
Your Mac's registration key is Blocked
Why we blocked your Mac Computer?
The Mac's registration key is illegal.
This Mac is using pirated software.
This Mac is sending virus over the internet.
This Mac is hacked or used from undefined location.
We block this Mac for your security.
Contact Apple helpline to reactivate your Mac.
This Mac computer is BLOCKED
Do not close this warning or restart your Mac
Your Mac's registration key is Blocked
Why we blocked your Mac Computer?
The Mac's registration key is illegal.
This Mac is using pirated software.
This Mac is sending virus over the internet.
This Mac is hacked or used from undefined location.
We block this Mac for your security.
Contact Apple helpline to reactivate your Mac.
Appearance of this website (GIF):
Yet another varaiant of 'Apple Support Alert' pop-up scam (crooks use '+1-844-320-5222' telephone number):
Text presented within this pop-up:
VIRUS ALERT FROM APPLE
This computer is BLOCKED
The window's registration key is illegal.
This window is using pirated software.
This window is sending virus over the internet.
This window is hacked or used from undefined location.
We block this computer for your security.
Contact Apple helpline to reactivate your computer.
This computer is BLOCKED
The window's registration key is illegal.
This window is using pirated software.
This window is sending virus over the internet.
This window is hacked or used from undefined location.
We block this computer for your security.
Contact Apple helpline to reactivate your computer.
Apple Support Alert
Your System Detected Some unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +1-844-320-5222
Your System Detected Some unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +1-844-320-5222
Instant automatic Mac malware removal:Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of Mac malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner for MacBy downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
▼ DOWNLOAD Combo Cleaner for MacBy downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
Quick menu:
- STEP 1. Remove PUA related files and folders from OSX.
- STEP 2. Remove rogue extensions from Safari.
- STEP 3. Remove rogue add-ons from Google Chrome.
- STEP 4. Remove potentially unwanted plug-ins from Mozilla Firefox.
Video showing how to remove rogue applications that display the 'VIRUS ALERT FROM APPLE' pop-up (which is identical to 'Apple Support Alert') using Combo Cleaner:
Potentially unwanted applications removal:
Remove potentially unwanted applications from your 'Applications' folder:
Click the Finder icon. In the Finder window, select “Applications”. In the applications folder, look for “MPlayerX”,“NicePlayer”, or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.
Combo Cleaner checks if your computer is infected with malware. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited three days free trial available.
Remove 'apple support alert' virus related files and folders:
Click the Finder icon, from the menu bar. Choose Go, and click Go to Folder..
Check for adware-generated files in the /Library/LaunchAgents folder:
In the Go to Folder.. bar, type: /Library/LaunchAgents
In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.
Check for adware generated files in the /Library/Application Support folder:
In the Go to Folder.. bar, type: /Library/Application Support
In the “Application Support” folder, look for any recently-added suspicious folders. For example, “MplayerX” or “NicePlayer”, and move these folders to the Trash.
Check for adware-generated files in the ~/Library/LaunchAgents folder:
In the Go to Folder bar, type: ~/Library/LaunchAgents
In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Examples of files generated by adware - “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”, etc. Adware commonly installs several files with the same string.
Check for adware-generated files in the /Library/LaunchDaemons folder:
In the Go to Folder.. bar, type: /Library/LaunchDaemons
In the “LaunchDaemons” folder, look for recently-added suspicious files. For example “com.aoudad.net-preferences.plist”, “com.myppes.net-preferences.plist”, 'com.kuklorest.net-preferences.plist”, “com.avickUpd.plist”, etc., and move them to the Trash.
Scan your Mac with Combo Cleaner:
If you have followed all the steps in the correct order you Mac should be clean of infections. To be sure your system is not infected run a scan with Combo Cleaner Antivirus. Download it HERE. After downloading the file double click combocleaner.dmg installer, in the opened window drag and drop Combo Cleaner icon on top of the Applications icon. Now open your launchpad and click on the Combo Cleaner icon. Wait until Combo Cleaner updates it's virus definition database and click 'Start Combo Scan' button.
Combo Cleaner will scan your Mac for malware infections. If the antivirus scan displays 'no threats found' - this means that you can continue with the removal guide, otherwise it's recommended to remove any found infections before continuing.
After removing files and folders generated by the adware, continue to remove rogue extensions from your Internet browsers.
'Apple Support Alert' virus removal from Internet browsers:
Remove malicious extensions from Safari:
Remove 'apple support alert' virus related Safari extensions:
Open Safari browser, from the menu bar, select 'Safari' and click 'Preferences..'.
In the preferences window, select 'Extensions' and look for any recently-installed suspicious extensions. When located, click the 'Uninstall' button next to it/them. Note that you can safely uninstall all extensions from your Safari browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Safari.
Remove malicious plug-ins from Mozilla Firefox:
Remove 'apple support alert' virus related Mozilla Firefox add-ons:
Open your Mozilla Firefox browser. At the top right corner of the screen, click the 'Open Menu' (three horizontal lines) button. From the opened menu, choose 'Add-ons'.
Choose the 'Extensions' tab and look for any recently-installed suspicious add-ons. When located, click the 'Remove' button next to it/them. Note that you can safely uninstall all extensions from your Mozilla Firefox browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Mozilla Firefox.
Remove malicious extensions from Google Chrome:
Remove 'apple support alert' virus related Google Chrome add-ons:
Open Google Chrome and click the 'Chrome menu' (three horizontal lines) button located in the top-right corner of the browser window. From the drop-down menu, choose 'More Tools' and select 'Extensions'.
In the 'Extensions' window, look for any recently-installed suspicious add-ons. When located, click the 'Trash' button next to it/them. Note that you can safely uninstall all extensions from your Google Chrome browser - none are crucial for normal browser operation.
- If you continue to have problems with browser redirects and unwanted advertisements - Reset Google Chrome.
Swipey Rogue Mac Os Catalina
Symptoms: Some clients are unable to connect to the internet. Some clients report a different IP address, subnet mask and default gateway, compared to others.
Caveats: Without a managed switch fabric, this is considerably more difficult.
Diagnosis:
1. Allow a device to get an IP address from the rogue server. You might need to disable the main DHCP server to allow this to happen, as DHCP is a broadcast protocol, so it's really a case of the early bird getting the worm.
1b: Kyle Gordon pointed out that this initially assumes that the DHCP server is the same as the default gateway. He suggests: Usually /var/lib/dhcpcd/*.info or /var/lib/NetworkManager/* will contain the dhcp-server-identifier info on Linux, and something in the Windows Event Logs will show similar :-)
2. Once you've got an IP from the rogue, look at the ethernet adaptor's status, and get the IP of the default gateway. For this example, we'll call it 10.1.1.1
Swipey Rogue Mac Os X
3. Ping the default gateway for a few seconds. We need to do this to populate the ARP table.
4. In a Powershell/Cmd/Terminal window, run the command to view the ARP table. On windows, this is `arp -a`. Gigachess (itch) mac os.
What you're looking for is the mapping between the IP address and the Physical (MAC) address.
Gremlin.exedotexe mac os. 5. Go to http://www.coffer.com/mac_find/ and paste the found Physical/MAC address of the rogue. This will tell you who made the device.
This works because all MAC address prefixes are registered by IANA, so you can look up a MAC address and it'll tell you who made the thing (roughly).
6. From the client with the rogue-assigned IP address, set up a long-running ping to the default gateway. We'll need this to confirm that it's been killed when we start unplugging/disabling ports.
7. Next, you want to open the management pages of all of the switches on the fabric of your network. Every switch has a MAC Address Table where it keeps track of physical switchports, and the learned MAC addresses it's seen on those ports.
8. Looking at the list of address tables (I find it's helpful to copy/paste them into a text editor, then do a search on the MAC of the rogue.) see if you can track down a port that has *only* that MAC assigned to it. If there's a single port on a managed device, you can disable/shutdown the port.
9. Failing that, if you find that the MAC is in the table, but on a port with other devices too, say, port 1 has 5 other things, and the rogue is one of them, then that indicates that there's another distribution switch on port 1, and the rogue is connected to that.
10. Hopefully, you might have some clue as to what is on each port, distribution switch wise, especially if you have managed under-desk distribution switches, although this is generally unlikely.
11. Start hunting. You know that it's on the network, and can ping it (so you can tell when it's been disconnected). You know something about the device, the manufacturer.
12. As you unplug devices, check whether the ping stops.
13. When the ping stops, you've found the rogue.
14. Congratulate yourself by having a coffee, beer, or a non-stimulating beverage.
I actually worked through this process with one of my Astound Wireless customers, last night, over a VPN.
It's really relatively straight forward, but is made considerably easier with a managed switch fabric.
In this case, the rogue turned out to be an Apple Airport Extreme, which do tend to cause havok if misconfigured, or misconnected, as their default is to broadcast DHCP on the 3 LAN ports, which aren't obvious that they're LAN ports, as they have the mysterious <-> symbol.
I suspect whomever plugged it into the network, should've connected the link to the building's switch fabric to the WAN port of the Airport Extreme, rather than the LAN. Or at the very least, disabled the DHCP server on the Airport.
An ideal solution for preventing this kind of mishap is DHCP snooping, but that *does* require a fully managed switch fabric, and a non-insignificant amount of management overhead.