How to scan your Mac for virus

Can your Mac be infected?

Once upon a time, a very mythical rumor circulated that Macs were impenetrable by viruses and malware. Over the years, that rumor left many Mac users unarmed and vulnerable to attacks.

Macs can get viruses. Moonlock's 2025 macOS threat report counted 17% more macOS stealer variants in 2025 than the year before, and criminals now sell stealer kits as subscription services.

Let's take a look at where viruses live on Mac and some notorious types of Mac malware and viruses.

Where does malware live on your Mac

There are a number of locations on your Mac that may be infected by malware. 

• Admin preferences pane

• Applications and launch agents

• Browser settings

• Login items

Malware programs will first try to hijack your admin privileges. If a malware app has managed to bypass your admin password or root password, from then on, it’s a free ride. The malware will be able to install things, copy itself, change the functionality of apps, etc.

Types of malware and viruses

• Adware: Although adware is not technically malware, it's clearly an unwanted and deceitful family of apps. Once installed, it displays unwanted advertisements on your Mac. Adware can collect your browsing history, bombard your Mac with pop-ups, change your browser, and install spyware. Not only is it really annoying, but it can cause lasting damage to your Mac. It will make using your Mac unbearable and can cause crashing and unresponsiveness. 
• PUPS (Potentially Unwanted Programs): PUPs are software programs that you most likely didn't want to install. They can come bundled along with something that you purposely downloaded and can collect private data, slow your Mac down, add toolbars to your browser, and display annoying ads.
• Spyware: Designed to gain access to and damage your Mac, often without the user even knowing. Spyware takes your personal information and gives your data to data firms or external third parties. 
• Trojan: Malicious software that looks authentic but can take control of your computer. They are designed to disrupt, damage, steal, or inflict other harmful actions on your data or network. A Trojan will trick you into activating it. Then, once installed, it will get to work, infiltrating and damaging your Mac.
• Stealers: Malware built to steal passwords, browser cookies, crypto wallets, and other personal data. Their number keeps growing, as the report above shows. Recent examples: Atomic Stealer (AMOS), Banshee and Poseidon.

How can Macs get infected?

Here's a quick look at just some of the ways viruses and malware can get on your Mac:

• Email attachments

• Free downloads

• Fake services

• Unsafe and unofficial apps

• Browser extensions

How to find and remove viruses on Mac

Luckily, there are a few ways to scan your Mac, remove threats, and keep your Mac protected against malicious software. Let's go.

1. Remove unknown apps

Let's start by checking what applications you have on your Mac. 

Maybe you accidentally downloaded some malware, or it came bundled with with something you purposely downloaded. You'll need to get rid of it quickly. Here's how:

1. Open a new Finder window and select Applications. 

2. Search for any applications that you do not recognize. If you find one, drag it to the Trash.

3. In Finder, choose Go > Go to Folder (Shift-Command-G), enter ~/Library, and press Return.

4. Open the Application Support folder, look for any files related to the app, and put those in the Trash.

Check the launch agent and daemon folders too: ~/Library/LaunchAgents, /Library/LaunchAgents, and /Library/LaunchDaemons. Remove only files that belong to the app you're removing, then restart your Mac: a launch file that's already loaded keeps its process running until you do. You may also want to remove app-related files from other locations — here's how to find files on Mac to make the process of hunting them down easier.

Don't forget to empty your Trash afterward.

2. Check for viruses the smart way

You could use a tool like CleanMyMac to scan for malicious software. Its Protection feature scans your Mac for malware and neutralizes the threats it finds.

If it does locate something suspicious on your Mac, it offers immediate removal. It is also signed and notarized by Apple.

Here's how to scan and protect your Mac with CleanMyMac:

1. Open CleanMyMac. No app yet? Get your free CleanMyMac trial — all features are free for 7 days.

2. Select Protection in the left sidebar.

3. Click Scan. If anything is found, follow the steps on the screen.

3. Check your browser

Check for adware extensions by removing suspicious or unknown installed browser extensions; here's how:

Chrome

1. Open Chrome.

2. Click on the 3-dot icon top right.

3. Select Extensions > Manage Extensions.

4. Search through your extensions in the window and click Remove on any that you don't recognize.

Safari

1. Open Safari.

2. In the top menu, select Safari > Settings, then click Extensions..

3. Check the list, click on any extensions that you are unsure of. If you don't remember installing it, click Uninstall.

4. Remove Login Items

Login items are apps that launch by default. Malware software especially likes to sneak into your login items without you knowing. Here's how to stop them from launching:

1. Go to Apple Menu > System Settings > General.

2. Navigate to Login Items & Extensions.

3. Under Open at Login, remove any suspicious apps by clicking the "-" button.

5. Check Activity Monitor

Activity Monitor, in some cases, can help you identify suspicious software that's using up your Mac's resources. Here's how:

1. Open Finder window > Applications> Utilities > Activity Monitor.

2. Scan through the CPU list and look for applications that you don't recognize.

3. Don't quit an unknown process straight away: check where its file is stored, who signed it, and what its name means first, as our guide on identifying malware in Activity Monitor explains.

Remember, some trusted apps have funny names for some of their services. Another downside to this is that Activity Monitor can't remove malware. But at least you can confirm your suspicions. 

6. Check your Launch Agents

Launch Agents is the most common directory to search for malware. Did you know that not all applications that work on your Mac appear in the Dock? There are dozens of tiny apps that humbly work in the background. These are called Launch Agents, and this is where malware often hides.

You may check if you have undetected Launch Agents right now.

For this test, we’ll use CleanMyMac. This Mac cleaning and optimization app is signed and notarized by Apple.

1. Open CleanMyMac (get your free trial here).
2. In the app, open Performance in the sidebar and run a scan.
3. Click View All Items and review your login and background items.
4. Remove only items you've identified as unwanted. Many belong to apps you use, such as Microsoft AutoUpdate or Google's updater, and removing them stops those apps from getting security updates. On a work Mac, leave items from your IT team's device management or security software alone.

7. Use built-in tools

Did you know that macOS comes with a preinstalled tool for protecting your Mac from viruses and malware? It is XProtect — antivirus detection technology that scans your Mac and compares the findings with the malware signatures maintained by Apple. It is a basic level of protection that is enabled by default.

XProtect detects and blocks known malware, checks for infections in the background, and removes the malware it recognizes. It works automatically, so you can rely on it while you choose a third-party antimalware app that suits you.

In order to ensure it runs properly, it is necessary to keep macOS up to date. Here's a quick reminder on how to do it: 

1. From the main Apple menu, click System Settings > General > Software Update. 
2. If an update is available, click Update Now. 
3. Also, activate Automatic Updates and, specifically, Security responses and system files.

8. Clear downloads and temporary files

Another way to find suspicious-looking files is to check the Downloads folder. The thing is that viruses and malware often hide in .dmg files or archives. You may have also downloaded a different type of file that may turn out to be malicious.

Therefore, take some time to check the Downloads folder and send to Trash any installers or archives you don't remember downloading. Empty the Trash afterward.

8. Check user accounts and configuration profiles

Some malware can add a user account or a configuration profile to keep control of your Mac, so it's worth checking both. Here's how to check user accounts:

1. Go to System Settings > Users & Groups. 
2. If there's an account you haven't created, first check whether another person who uses this Mac or your IT team created it. On a work Mac, an extra admin account usually belongs to IT. If it's definitely not legitimate, click the i icon next to its name.
3. Click Delete User and choose Delete the home folder.
4. Once again, click Delete User. You may also want to restart your Mac.

Then check for configuration profiles you didn't install: go to System Settings > General > Device Management. Adware can use a profile to control your Mac's settings. If you find one you don't recognize on your own Mac, select it and click the Remove button. On a work or school Mac, leave profiles alone and ask your IT team.

Hopefully, now you know how to find and remove viruses from Mac. Malware can steal your passwords and personal data, so it's worth taking seriously, and it's better to prevent infection by playing safe online and running routine checks with a smart tool like CleanMyMac.