How to remove Mac.walleu.live ads

Mac.walleu.live displays a fake message to make people believe their system is infected

Mac.walleu.live is a bogus website that displays a fake security alert from Norton. Obviously, Norton has nothing to do with this fraudulent campaign. Crooks are using their name to gain trust and credibility. The page tries to convince people that their system is infected with multiple viruses. The full message reads as follows:

Norton Security
Your PC is infected with 5 viruses!
ACTION REQUIRED!
Your Norton Subscription Has Expired!
Renew now to keep your pc protected.
If your PC is unprotected, it is at risk for viruses and other malware.

It uses various social engineering^[1] methods to achieve that. First, people are told that their Norton subscription has ended so their computers got infected by 5 viruses. Next, to convince users even more, the page proceeds to pretend to scan the machine.

Websites cannot scan the system, so it is just a fake animation. Of course, when the scan is over, it shows that the system is in danger. The main purpose of this scam is to redirect users to the official Norton site so they would make a purchase. Crooks get paid through the affiliate program.

How to spot fake security alerts?

There are a couple of things you can do to avoid getting tricked by fake malware scams. Firstly, always remain calm if an alert shows up and inspect it. The alert is likely fake if:

• It is supposedly from security software that you have not installed
• It is supposedly from your security software but the alert looks different
• It tells you that a scan was performed but all you did was visit a website (it is impossible for websites to know what infections are on your computer)
• It tells you that multiple viruses were detected on your computer (legitimate security programs perform scans frequently, so most alerts notify you that only one malware program has been found)

Distribution methods

Pages like Mac.walleu.live are rarely found in the search results.  Usually, they hide on other shady sites that are full of deceptive ads and sneaky redirects. You should be careful and not click on random links or ads. The Internet is full of “gateway” sites that redirect to shady sources.

Especially avoid illegal streaming sites^[2] because they are unregulated. They may display fake “Download” and “Play” buttons^[3] that open new tabs with harmful sites inside. Choose legitimate streaming platforms, like Netflix or Hulu instead. They require only a small monthly subscription fee and they are completely fake.

Another possibility is that the website appeared without any user input. This can happen if there is adware^[4] hiding in your machine. It can cause an increased amount of commercial content like pop-ups, banners, and redirects. The removal method depends on the type of infection, so proceed step-by-step.

Disable push notifications

To stop annoying virus alerts from Mac.walleu.live, you have to block the site permissions that allow it to show you push notifications. You can do that by following our step-by-step guide:

Google Chrome (desktop):

1. Open Google Chrome browser and go to Menu > Settings.
2. Scroll down and click on Advanced.
3. Locate the Privacy and security section and pick Site Settings > Notifications.
4. Look at the Allow section and look for a suspicious URL.
5. Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

Google Chrome (Android):

1. Open Google Chrome and tap on Settings (three vertical dots).
2. Select Notifications.
3. Scroll down to Sites section.
4. Locate the unwanted URL and toggle the button to the left (Off setting).

Mozilla Firefox:

1. Open Mozilla Firefox and go to Menu > Options.
2. Click on Privacy & Security section.
3. Under Permissions, you should be able to see Notifications. Click Settings button next to it.
4. In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
5. Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.

Safari:

1. Click on Safari > Preferences…
2. Go to Websites tab and, under General, select Notifications.
3. Select the web address in question, click the drop-down menu and select Deny.

MS Edge:

1. Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
2. Select Settings and then go to Advanced.
3. Under Website permissions, pick Manage permissions and select the URL in question.
4. Toggle the switch to the left to turn notifications off on Microsoft Edge.

MS Edge (Chromium):

1. Open Microsoft Edge, and go to Settings.
2. Select Site permissions.
3. Go to Notifications on the right.
4. Under Allow, you will find the unwanted entry.
5. Click on More actions and select Block.

Clear your browsers

The next thing we recommend doing is deleting cookies and cache. Cookies are small data files that can store information such as your IP address, geolocation, links you click on, and things you purchase online. This data can later be sold to advertising networks or other third parties.

FortectIntego maintenance tool can delete cookies and cache automatically so you do not need to worry about it. Besides, this powerful software can fix various system errors, BSODs, corrupted files, and registry issues which is especially helpful after a virus infection.

Scan your machine with anti-malware tools

If you disabled push notifications but still experience unwanted symptoms like unexpected redirects and an increased amount of commercial content, like pop-ups, and banners you should scan your system for adware. We suggest using trusted professional security tools SpyHunterCombo Cleaner or MalwarebytesMalwarebytes for PUP removal. It should detect most suspicious apps and remove them successfully.

Of course, you can also remove a PUP manually, but it is unknown which particular app could be causing annoying behavior, as crooks disguise them as “handy” tools. Manual uninstallation can also leave some traces of the program behind which could result in the renewal of the infection.

However, if you still do not want to use security tools and know which program is at fault, use the instructions below to help you uninstall it:

Windows 10/8:

1. Enter Control Panel into Windows search box and hit Enter or click on the search result.
2. Under Programs, select Uninstall a program.
3. From the list, find the entry of the suspicious program.
4. Right-click on the application and select Uninstall.
5. If User Account Control shows up, click Yes.
6. Wait till uninstallation process is complete and click OK.

Windows 7/XP:

1. Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
2. In Control Panel, select Programs > Uninstall a program.
3. Pick the unwanted application by clicking on it once.
4. At the top, click Uninstall/Change.
5. In the confirmation prompt, pick Yes.
6. Click OK once the removal process is finished.

Mac:

1. From the menu bar, select Go > Applications.
2. In the Applications folder, look for all related entries.
3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)

To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

1. Select Go > Go to Folder.
2. Enter /Library/Application Support and click Go or press Enter.
3. In the Application Support folder, look for any dubious entries and then delete them.
4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.