Severity scale:  

Remove (Removal Guide) - Free Instructions

removal by Lucia Danes - - | Type: Adware – a Mac-based pop-up scam that alerts about e.tre456_worm_osx malware pop-up scam is a fake pop-up scam which bombards Mac users with false virus alerts. The message claims that there were three viruses detected one of which appears to be a Trojan horse[1] named A more legitimate look is given to the message by making it look like it is coming from Apple itself. However, all this information about system damage and the need for immediate repairing is just a trick to convince users to press the “Scan now” button. If you do click on this option, you will supposedly be redirected to a page or a new window that promotes questionable computer cleaning software, e.g. Mac Keeper. Additionally, users have been complaining about very similar scams that claim almost the same as in this one, however, they admit that the AppleCare Protection Plan logo truly does give a legitimate look to the pop-up message and it is easy to get tricked by it.[2]

Not only that pop-up scam drops a particular message once entering a certain type of web page, but also this type of text appears and warns about a trojan detected:

We have detected a trojan virus (e.tre456_worm_osx) on your Mac.
Press OK to begin the repair process.

As we have already mentioned, pop-up has the intention to show up on rogue and protection-lacking websites. If this is the case, you should stop visiting these types of sites which are causing the scam to appear or get Adblock Plus[3] adblocking tool which also might prevent various misleading pop-ups from appearing on the screen.

Type Pop-up scam/adware
The cause This message might be caused by a potentially unwanted program or found on certain websites
Target Mac machines
Purpose To promote misleading computer software and gain income from users' purchases
Fake trojan e.tre456_worm_osx is the most harmful infection presented by the fake message
Computer scanning software Reimage, SpyHunter 5Combo Cleaner
Removal process You can eliminate the unwanted content by using specific tools or manual instructions

However, if keeps on showing up frequently not only while browsing on unprotected websites, there might be some type of potentially dangerous software or rogue content installed on your machine that might be forcing the pop-up message to show up and display whenever you are trying to perform browsing sessions.

In this case, you will need to scan your entire computer system with a reputable program and try to discover the cause of this pop-up scam. Mostly, adware programs are expected to be the ones that are provoking such activity. You can perform a full system scan with a tool such as Reimage and then remove from the Mac system. virus might also slow down your browsing activity if it starts producing misleading and intrusive notifications frequently. Additionally, the potentially unwanted program which is forcing this scam to show up might also leave rogue content in your web browser applications, including Google Chrome, Mozilla Firefox, and Safari. removal is the best thing you can do if you are dealing with the pop-up scam. It can be performed automatically by using specific computer software or by performing the step-by-step guide that is provided at the end of this article. If you choose manual elimination, ensure that web browsers are also fully cleaned from adware-related content. rogue pop-up message is a false pop-up which might occur on unprotected websites or be caused by a potentially unwanted program

Potentially unwanted content can be distributed through bundles

According to computer specialists from,[4] you can get your system infected with potentially unwanted programs or even malicious objects by completing downloads from free sources. Networks such as Torrents or The Pirate Bay do not fit the recommended security requirements, are illegitimate, and might include malware or suspicious content.

For further control of your downloads, make sure that you pick the Custom or Advanced configuration mode rather than choosing the Quick mode. Various Quick & Recommended modes allow rogue content to slip in the system without even being investigated, while, by using the Custom configuration you can always keep an eye on incoming programs.

Last but not least, it is very important to take care of automatical computer protection too. For this purpose, choose a reliable antivirus program and download it to your system. If you make sure that it is always updated properly, the program will definitely appear handy to you by allowing to perform full system scans and providing daily threat protection. needs to be removed from Mac to achieve fast system performance

Various pop-up scams are intruders which interrupt browsing sessions and might slowdown both browsing and computing work. virus is not an exception. This cyber threat is supposedly caused by a potentially unwanted program if you are dealing with its appearance frequently and needs to be removed after discovery.

To remove, you can use anti-malware software or complete elimination steps by performing the below-written manual removal guide. However, if you lack confidence in the virus removal field, we recommend postponing the solution of manual elimination for possible future threats and leaning on reputable tools.

The removal needs to be completed safely and effectively, otherwise, there is a risk that the potentially unwanted program might renew itself through the components that have not been eliminated and are still lurking on the user's computer or are still installed in web browser applications.

You can remove virus damage automatically with a help of one of these programs: Reimage, SpyHunter 5Combo Cleaner, Malwarebytes. We recommend these applications because they detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with SpyHunter 5.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.

To remove, follow these steps:

Remove from Mac OS X system

Clean your Mac computer system from suspicious components and make sure that no rogue processes are running and no “helper objects” are remaining active:

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Uninstall from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Erase from Mozilla Firefox (FF)

If you have spotted some unexpected changes in Mozilla Firefox, you can easily reverse them and bring your web browser back to its previous state by looking through this guide:

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete removal. Click on 'Reset Firefox' button for a couple of times

Eliminate from Google Chrome

Use this below-given instructing guide to remove all adware-added extensions from your Google Chrome web browser application:

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete removal. Click on 'Reset' button to complete your removal

Get rid of from Safari

Clean the Safari web browser application from suspicious adware-related content by using these instructions. Potentially unwanted programs are capable of injecting questionable extensions which need to be removed:

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete removal process. Select all options and click on 'Reset' button

About the author

Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Lucia Danes
About the company Esolutions


Your opinion regarding