“Norton – This Mac Is Infected With Viruses” Scam

The “Norton – This Mac Is Infected With Viruses” scam is a deceptive online scheme that falsely claims a user’s Mac is infected with viruses. This scam, often delivered via pop-ups or fraudulent websites, mimics the official Norton AntiVirus branding to trick users into taking unnecessary actions.

---

Threat Summary

Attribute	Details
Name	“Norton – This Mac Is Infected With Viruses” pop-up scam
Threat Type	Phishing, Scam, Mac Malware, Fake Virus Warning
Fake Claim	The user’s Mac is infected with viruses.
Disguise	Norton AntiVirus (not associated with the real Norton security software)
Related Domains	febilang[.]xyz
Detection Names	Combo Cleaner (Malware), G-Data (Malware), alphaMountain.ai (Suspicious), Forcepoint ThreatSeeker (Suspicious)
Serving IP Address	45.141.156.249
Symptoms	Fake virus warnings, system scan pop-ups, deceptive error messages, browser hijacking
Damage	Privacy invasion, display of intrusive ads, system infection risks, potential identity theft
Distribution Methods	Deceptive pop-ups, software bundling, torrent file downloads, malicious redirects
Danger Level	High

---

How the Scam Works

Upon accessing a fraudulent webpage, users see a pop-up warning that their Mac has been infected with viruses. The scam site mimics Norton AntiVirus and appears to perform a fake system scan, which always detects threats on the visitor’s device. After the bogus scan, a pop-up message urges users to take immediate action by clicking a “Remove Viruses Now” button.

While some versions of the scam redirect users to the official Norton website to earn affiliate commissions, others may lead to dangerous third-party sites promoting malware, phishing schemes, or untrustworthy software such as adware, browser hijackers, or trojans.

Potential Dangers of This Scam

Victims of the "Norton - This Mac Is Infected With Viruses" scam may experience:

• Privacy risks: Scammers may collect personal data, browsing activity, and even login credentials.
• Financial fraud: Users might be tricked into purchasing fake antivirus solutions.
• Identity theft: Personal and financial information may be stolen if entered on fraudulent websites.
• System infections: Clicking scam links could lead to the installation of malware.

---

How to Remove "Norton - This Mac Is Infected With Viruses" Scam

Step 1: Close the Scam Pop-up and Exit the Browser

1. Do not click on any links or buttons within the scam pop-up.
2. Force quit your browser (Safari, Chrome, or Firefox) using Command + Option + Esc, selecting the browser, and clicking "Force Quit."

Step 2: Remove Suspicious Extensions and Reset Browser Settings

Safari

1. Open Safari > Go to "Preferences."
2. Navigate to the "Extensions" tab and remove any unknown or suspicious extensions.
3. Go to "Privacy" > Click "Manage Website Data" > Remove all unknown entries.
4. Reset Safari by selecting "Advanced" > "Develop" > "Empty Caches."

Google Chrome

1. Click on the three-dot menu > "Extensions."
2. Remove any suspicious or unfamiliar extensions.
3. Go to "Settings" > "Privacy and security" > "Clear browsing data."
4. Reset Chrome: Go to "Settings" > "Advanced" > "Reset settings."

Step 3: Scan Your Mac with SpyHunter

1. Download and install SpyHunter from a trusted source.
2. Open SpyHunter and run a full system scan.
3. Allow the scan to complete and follow the on-screen instructions to remove detected threats.

Step 4: Remove Malicious Profiles (If Found)

1. Open System Preferences > Go to "Profiles."
2. Delete any unknown or suspicious profiles.

Step 5: Flush DNS Cache (Optional but Recommended)

1. Open Terminal and enter the command:

   sudo killall -HUP mDNSResponder

2. Press "Enter" and restart your Mac.

---

Preventative Measures to Avoid Future Infections

Avoid Clicking on Suspicious Links

• Never trust unexpected pop-ups claiming your device is infected.
• Close pop-ups using the X button rather than interacting with their content.

Keep Your Mac and Software Updated

• Enable automatic updates for macOS and browser software.
• Update all installed apps regularly.

Use Reliable Security Software

• Install SpyHunter for real-time protection.

Be Wary of Free Software Downloads

• Avoid downloading software from unknown sources or torrent websites.
• Choose custom installation to prevent installing bundled adware or PUAs.

Enable Pop-up Blockers and Safe Browsing Features

• Enable pop-up blockers in Safari or Chrome.
• Turn on Google Safe Browsing in Chrome’s security settings.

Regularly Clear Your Browser Cache and Cookies

• Deleting stored data prevents tracking and improves security.

Use a Password Manager and Enable Two-Factor Authentication (2FA)

• Secure accounts with unique passwords and 2FA to prevent unauthorized access.

---

Final Thoughts

The "Norton - This Mac Is Infected With Viruses" scam is a deceptive tactic used to manipulate users into downloading fake software or providing personal information. Understanding how these scams work, knowing how to remove them effectively, and implementing preventive measures can help keep your Mac and personal data secure. Always stay vigilant online and use trusted security tools like SpyHunter to safeguard your system from malware and fraud.