How to Remove Malware from a Mac

Mac malware exists and can slow your system, steal data, or display unwanted ads. This guide walks you through detecting and removing malicious software using macOS built-in tools and trusted third-party applications.

1. Check Activity Monitor for suspicious processes. Open Activity Monitor from Applications > Utilities. Click the CPU tab and look for processes consuming high CPU that you don't recognize. Common malware names include MPlayerX, VSearch, or processes with random character strings. Note any suspicious process names before proceeding.
2. Remove suspicious applications from Applications folder. Open Finder and navigate to Applications. Look for apps you didn't install, especially those with generic names or poor icons. Drag suspicious applications to the Trash. Empty the Trash immediately to prevent the malware from reinstalling itself.
3. Clear browser extensions and reset settings. Open Safari and go to Safari > Preferences > Extensions. Remove any extensions you don't recognize. For Chrome, go to Chrome > Preferences > Extensions and disable unknown add-ons. Reset your browser's homepage and search engine if they've been changed without your permission.
4. Run XProtect and MRT scans. macOS includes built-in malware protection. Force an update by opening Terminal and running 'sudo /usr/libexec/xpchelper --reload'. Restart your Mac to trigger automatic scans. XProtect runs silently in the background, while Malware Removal Tool (MRT) runs during system updates.
5. Scan with Malwarebytes for Mac. Download Malwarebytes for Mac from malwarebytes.com. Install and run a full system scan. The free version detects and removes most Mac malware including adware, browser hijackers, and potentially unwanted programs. Follow the prompts to quarantine or remove detected threats.
6. Delete malware-related files manually. Open Finder and press Command+Shift+G. Navigate to ~/Library/LaunchAgents and /Library/LaunchDaemons. Look for .plist files with suspicious names or recent creation dates. Move questionable files to Trash. Check ~/Library/Application Support for folders related to removed malicious apps.
7. Update macOS and enable firewall. Go to Apple Menu > About This Mac > Software Update and install any available updates. Navigate to System Preferences > Security & Privacy > Firewall and turn on the firewall. Enable stealth mode to make your Mac less visible to network attacks.