A pop-up says your MacBook has viruses and urges you to click “Scan Now”? Don’t click it, call a number, or download the cleaner it recommends. That message may be a fake warning from a website, not proof your Mac is infected.
If you’re searching for how to remove a virus from a MacBook, start by checking where the warning appears. Then work through the steps below. Most of them are quick, and you don’t need to pay for a cleaner just to close a fake alert or remove a browser permission.
How to check if your MacBook has a virus
A warning inside a Safari tab is different from a macOS alert naming a specific app. Some web pop-ups imitate Apple or other trusted companies to get you to share information or install unwanted software. Apple explains how to handle suspicious Safari pop-ups (opens in a new tab).
If the alert is covering a web page, close the tab or quit Safari. Don’t use buttons inside the message, even if one says “Close.” If Safari keeps reopening the same tabs, quit it, then hold Shift while opening it again.
If macOS says a particular app will damage your computer, take that warning seriously. Don’t open it or choose an option that bypasses the warning. macOS may already have moved the app to the Trash. If it has, empty the Trash and don’t restore the app.
One slow day or a single ad is not enough to diagnose a virus. Look for a specific warning, an app you don’t remember installing, or alerts that keep returning after you close the browser.
How to remove a virus from a MacBook
1. Update macOS and restart
Open Apple menu > System Settings > General > Software Update and install available updates. Then restart your MacBook.
macOS includes XProtect, Apple’s built-in protection against known malware. It checks apps in certain situations and can block known malicious software. There isn’t a regular “Scan Mac” button in System Settings, so be wary of websites that claim one click will clean everything. Apple describes how XProtect works (opens in a new tab).
2. Remove an app you don’t trust
Think about what you installed shortly before the warnings began. Check Finder > Applications for an app you don’t recognize. If you’re unsure what it is, look it up before deleting it. Don’t remove apps from the System folder or random files just because their names look unfamiliar.
If you decide the app is unwanted, quit it first. Use its own uninstaller if it has one. Otherwise, select it in Applications, move it to the Trash, and empty the Trash. Apple’s app removal steps (opens in a new tab) explain what to do if it won’t delete.
If macOS specifically says a downloaded item is malware, don’t open it. Move that item to the Trash and empty it. Apple recommends this for files identified as malware (opens in a new tab).
3. Check Safari extensions and website notifications
An unwanted extension or website permission can keep showing ads after you leave the page. In Safari, open Safari > Settings > Extensions and remove anything you don’t remember adding.
For notifications, open Safari > Settings > Websites > Notifications. Set unfamiliar sites to Deny. You can also open Apple menu > System Settings > Notifications, select the website, and turn off Allow Notifications. Website alerts can appear even when Safari is closed, so that alone doesn’t mean a virus is running. Apple explains how to turn off website notifications (opens in a new tab).
4. Protect any details you entered
If you typed a password into the alert or a page it opened, change that password from another trusted device. If you entered card or bank details, contact your bank. Don’t give a caller remote access to your Mac because a pop-up told you to.
Do you need a Mac virus scan?
If you want to remove a virus from a Mac for free, start with the built-in steps: update macOS, restart, remove an app you know is unwanted, and check browser extensions and notifications. XProtect runs automatically, but it isn’t a manual full-disk scan you start from a button.
If the same warning keeps coming back after these checks, or you find an app you can’t remove, contact Apple Support or a trusted Mac technician. Avoid downloading a “Mac cleaner” from an ad or a virus warning. If you choose a separate malware scanner, get it directly from a reputable developer or the App Store.
The same basic checks work if you’re wondering how to remove a virus from a MacBook Air. Menu names can vary a little by macOS version, but the key is to deal with the source of the alert, whether that’s a web page, a notification permission, or an app. Don’t pay a pop-up to “fix” your Mac.
Frequently asked questions
Do MacBooks have built-in malware protection?
Yes. macOS includes protection such as XProtect, which can detect and block known malware. Keep macOS updated and take its warnings seriously. There is no ordinary full-disk Scan Mac button in System Settings, and built-in protection does not make every download safe.
Why do virus alerts appear when Safari is closed?
A website may have permission to send notifications. Check Safari's website notification settings and your Mac's Notifications settings, then disable alerts from sites you do not trust. A notification appearing outside the browser does not by itself prove that malware is running.
Should I install the cleaner recommended by a pop-up?
Do not download a cleaner or call a support number because a warning webpage tells you to. Close the alert, review recent apps and browser permissions, and update macOS. If the problem persists, get help from Apple Support or a trusted technician instead of following the advertisement.
