How to Remove Malware From Mac

What Causes This?

Malware on a Mac usually gets installed through fake software updates, cracked apps, malicious browser extensions, phishing links, or downloads from untrusted websites. In some cases, it is bundled with free apps and quietly adds adware, tracking tools, or background processes without clear permission. While macOS has built-in security features, they do not catch every unwanted app or leftover file.

Common Symptoms

• Your Mac suddenly runs much slower than normal
• Pop-up ads appear in Safari or Chrome even on trusted websites
• Your homepage or default search engine changes by itself
• The fan runs constantly and Activity Monitor shows unknown processes using high CPU
• You see apps, profiles, or login items you do not remember installing

How to Fix It Manually

1. Disconnect from the internet

   • Turn off Wi-Fi from the menu bar or unplug Ethernet.
   • This can stop malware from sending data or downloading more files while you clean the system.

2. Remove suspicious apps

   • Open Finder > Applications.
   • Look for apps you did not install, fake cleaners, “helper” tools, or anything with a generic name.
   • Drag suspicious apps to the Trash.
   • Then right-click the Trash and choose Empty Trash.

3. Check Login Items and background access

   • Open Apple menu > System Settings > General > Login Items.
   • Under Open at Login, remove anything unfamiliar by selecting it and clicking the minus (-) button.
   • Also review Allow in the Background and turn off suspicious items.
   • Restart your Mac after removing them.

4. Remove suspicious browser extensions and reset browser settings

   • In Safari, open Safari > Settings > Extensions and uninstall anything you do not recognize.
   • In Chrome, open Chrome > Settings > Extensions and remove suspicious extensions.
   • Check your homepage and search engine settings in each browser and change them back if they were modified.
   • Clear browsing data:
     • Safari: Safari > Clear History
     • Chrome: Chrome > Delete browsing data

5. Check for unknown configuration profiles

   • Open Apple menu > System Settings > Privacy & Security.
   • Scroll to Profiles if it appears.
   • If you see a profile you did not install, select it and remove it.
   • Malware sometimes uses profiles to lock browser or network settings.

6. Look for suspicious processes

   • Open Applications > Utilities > Activity Monitor.
   • Sort by CPU or Memory.
   • If you find a process with a strange name using heavy resources, search its name online before ending it.
   • Select it, click the X button, and choose Force Quit if needed.

7. Delete leftover files from common malware locations

   • In Finder, click Go > Go to Folder.
   • Check these folders one at a time:
     • ~/Library/LaunchAgents
     • /Library/LaunchAgents
     • /Library/LaunchDaemons
     • ~/Library/Application Support
   • Look for recently added files or folders tied to suspicious apps you removed.
   • Move only clearly unwanted items to the Trash. If you are unsure, leave the file alone.

8. Update macOS and run a restart

   • Open Apple menu > System Settings > General > Software Update.
   • Install all available updates.
   • Restart your Mac and check whether the pop-ups, slowdowns, or browser changes are gone.

Fix It Automatically with Kudu

If you do not want to dig through login items, browser extensions, and leftover support files by hand, Kudu can help speed up the cleanup. It can identify suspicious leftovers, junk files, and unwanted items that often remain after manual removal, making it easier to get your Mac back to normal safely.

Download Kudu Free →