Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

If you suspect malware on your Mac, don’t open the suspicious item again. Update macOS, remove any unwanted app using its own uninstaller if available, and use Safe Mode and startup-item settings to investigate recurring problems. Erasing the Mac is a last resort—not the first response to an unfamiliar pop-up or vague symptom.

What to know about Mac malware protection

macOS includes XProtect, which Apple describes as built-in antivirus technology for signature-based malware detection and removal. Apple also documents remediation capabilities, but does not promise that every malicious program will be detected.

On macOS 10.15 and later, XProtect checks for known malicious content when an app is opened for the first time, when the app changes in the file system, and when XProtect signatures update. Apple says those signatures update independently of system updates, and that macOS checks for XProtect updates daily by default. A daily check is not a guarantee that new signatures are delivered every day.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Apple describes protections that can prevent apps from launching, block known malware, and remediate malware that has run. When XProtect detects known malware, Apple says it blocks the item, moves it to the Bin, and alerts the user in Finder. XProtect can also remediate malware after threat information changes; the Mac is not automatically restarted by that process. Apple Platform Security: Protecting against malware in macOS

#1 Best Overall
Sale
McAfee Total Protection 2027 Antivirus Software for 3 Devices | Auto-Renews
  • THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
  • PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
  • SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
  • GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
  • MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.

Remove a suspicious app safely

1. Don’t run the item again

If the concern started with an unexpected app in an email or other file, don’t open it. Apple advises deleting an unexpected app attachment rather than launching it. If you already opened an app and suspect it is unwanted, quit it before trying to remove it.

2. Check for macOS updates

Open the Apple menu, choose System Settings, then select General > Software Update. Install available updates. Keeping macOS current is part of Apple’s security advice, but system updates and XProtect signature updates are not the same thing: Apple says signatures can update independently.

Rank #2
Sale
McAfee Total Protection 2027 Antivirus Software for 5 Devices | Auto-Renews
  • THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
  • PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
  • SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
  • GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
  • MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.

3. Use the app’s uninstaller when available

  1. In Finder, look for the app in Applications or your user’s Applications folder.
  2. If it is not an Apple app, check its folder for an Uninstall or Uninstaller app, or look in the app for a removal feature. Follow that app’s removal instructions.
  3. If there is no uninstaller, drag the app to the Trash. Enter an administrator password if macOS asks for one.
  4. Empty the Trash only after checking that you do not need anything in it.

Apple recommends the app’s own uninstaller where possible because related login items, extensions, or other files may be stored outside the app itself. Do not try to remove software required by macOS or items in the System folder. Deleting an app does not delete documents you created with it or cancel a subscription. If Finder says the app is in use, make sure it is closed; if needed, restart the Mac or try again in Safe Mode. Apple Support: Delete or uninstall apps on Mac

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use Safe Mode to investigate startup problems

Safe Mode can help you troubleshoot problems caused by software that loads when your Mac starts. It is a diagnostic step, not proof that malware is present or a substitute for removing a known unwanted app. First identify your processor: open the Apple menu, choose About This Mac, and check whether it says Apple silicon or Intel.

Rank #3
Sale
Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

Apple silicon Mac

  1. Choose Apple menu > Shut Down and wait for the Mac to turn off.
  2. Press and hold the power button until the startup options appear.
  3. Select a startup volume.
  4. Hold Shift, then click Continue in Safe Mode.

Intel Mac

  1. Restart or turn on the Mac.
  2. Immediately press and hold Shift.
  3. Release Shift when the login window appears, then sign in.

Apple says “Safe Boot” should appear at login. You can also check System Information for Boot Mode: Safe. Steps and labels can vary with macOS release and Mac hardware. Apple Support: Start up your Mac in safe mode

Review login items and extensions if the problem returns

If an unwanted app reappears at login or a startup problem continues, review the software set to open at login. In macOS Ventura 13 or later, open System Settings > General > Login Items & Extensions. Remove a login item only if you recognize it as unwanted or can verify it is connected to the problem. You can turn off third-party extensions temporarily to troubleshoot.

Rank #4
Sale
Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

An unfamiliar login item or extension is not, by itself, evidence of malware. If you have identified a particular app as unwanted, its uninstaller may remove associated startup components more completely. Apple Support: Change Login Items & Extensions settings on Mac

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

When to erase and reinstall macOS

Erasing removes information from the Mac, so it is a high-impact recovery step—not an appropriate first response to a vague symptom or browser pop-up. If a severe, persistent problem makes erasing necessary, back up important data first and use Apple’s instructions for your exact Mac model and macOS release.

Best Value
Sale
Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

The Apple erase-and-reinstall procedure cited here is specifically for Intel Macs without the Apple T2 Security Chip. It does not cover Apple silicon Macs or Intel Macs with a T2 chip. Do not apply those instructions to a different Mac configuration. Apple Support: Erase and reinstall macOS

Reduce the chance of another infection

  • Install available macOS updates.
  • Download software only from sources you trust; avoid unlicensed or pirated software.
  • Delete an unexpected app attachment instead of opening it.
  • Where practical, limit administrator accounts and use a standard account for everyday work.

These steps reduce risk; they cannot guarantee that malware will never reach a Mac. Apple Support: Protect your Mac from malware

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.