Potential threats detected (Virus Removal Instructions) - Tech Support Scam
Potential threats detected Removal Guide
What is Potential threats detected?
Potential threats detected is a scam alert targeting Mac OS users

Potential threats detected is a pop-up notification that alerts Mac OS X users about critical system's status and urges to download a security tool to fix it. It claims that the system is heavily damaged and indicates the harm in percentage. Potential threats detected pop-up typically points out a Trojan infection,[1] though adware, keyloggers, spyware, and other cyber threats might be listed. Do not fall for downloading the promoted application because the Potential threats detected is a scam[2] that seeks to foist useless or even dangerous application.
| Name | “Potential threats detected” |
|---|---|
| Classification | Adware |
| Sub-category | Tech-support-scam |
| Symptoms | Web browser keeps redirecting to a website saying “Potential threats detected” |
| OS targeted | Mac OS X |
| Distribution | Bundling, suspicious websites |
While cybersecurity community is used to scam alerts targeting Windows OS, Mac system is more and more frequently contaminated by tech-support alerts. “MAC Malware Warning Alert,” “Mac Detected TAPSNAKE infection,” and “Your Mac Might Be Infected” are just a few examples of the scam alerts targeting Mac users.
Potential threats detected alert might be triggered by two factors, i.e., adware infection or landing on an infected website. In case of the ad-supported app being the case, web browser's settings are modified in a way to redirect users to Potential threats detected website regularly. Usually, the scam locks the screen, so that the user has only two options – to click on the “Free scan now” button or force close the web browser.
The warning looks quite professional and might trick less experienced users into believing that the Mac OS system has been infected. The Potential threats detected virus says:
Potential threats detected!
Your Mac is heavily damaged (34,56%). Personal and banking information is at risk.
To avoid more damage click on 'San now' immediately. Our deep scan will provide help immediately!. Update your PC and eliminate potential threats.
Free Scan Now
The tech-support-scam developers claim security software like Norton and McAfee to be affiliates without authorization. Dieviren.de[3] cybersecurity researchers notify that such claims are false. Reputable security developers to not spread pop-up alerts online or otherwise foist their software downloads.
By clicking on the “Free scan now” button, the unsuspecting Mac's user permits to download and install third-party software, which may eventually turn out to be a potentially unwanted program or virus.
Therefore, in case your web browser started initiating redirects to the scam website, download FortectIntego and run a full system scan with it to remove Potential threats detected virus.
Potential threats detected removal could also be initiated manually. For this purpose, you should check the list of recently installed apps and eliminate those you are not familiar with. If you are not sure which ones have to be eliminated, initiate online research on them. After that, check Mac's libraries to related files.

Adware distributors rely on bundling
Adware-type and other potentially unwanted programs (PUPs) may be distributed directly, i.e. they may have official websites or may even be spread on sources like Google Play Store. Nonetheless, PUP developers most frequently rely on bundling, meaning that unwanted programs are attached to other freeware as optional downloads.
By selecting Quick or Basic installation setups, device users inadvertently give permission to download each additional component, be it a toolbar or add-on.
IT specialists remind Mac users to be extremely careful with freeware and do not rush the installation. Before downloading one, make a research on it, read reviews, Terms of Use, and Privacy Policy. Besides, always opt for Custom or Advanced installation to unpack the bundle.
Last, but not least, do not trust pop-ups that emerge during web browsing and report the status of your device. There's no such tool as a “Free online scanner.” The same applies to software update prompts. If you believe that your system is at risk, download updates from trusted sources or scan the system with a reputable security tool.
Get rid of Potential threats detected pop-up
Potential threats detected virus is more intrusive than dangerous. However, it may trigger continuous web browser's freezes and trick people into downloading useless or even dangerous tools, such as rogue anti-spyware or system's optimizer.
To prevent unwanted downloads, remove Potential threats detected scam from your web browser using a reputable anti-malware program.
Those opting for manual Potential threats detected removal could follow step-by-step instructions that are provided down below but don't forget that the smallest component left intact may reinstall the adware and repeatedly hijack the web browser.
You may remove virus damage with a help of FortectIntego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.
Getting rid of Potential threats detected. Follow these steps
Uninstall from Windows
-
Click Start → Control Panel → Programs and Features (if you are Windows XP user, click on Add/Remove Programs).
-
If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program.
-
Uninstall Potential threats detected and related programs
Here, look for Potential threats detected or any other recently installed suspicious programs. -
Uninstall them and click OK to save these changes.
Delete from macOS
The following guide explains how to get rid of adware infection from Mac:
-
If you are using OS X, click Go button at the top left of the screen and select Applications.
-
Wait until you see Applications folder and look for Potential threats detected or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data…
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox…
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
If Safari keeps redirecting you to a domain, which shows a “Potential threats detected” alert, eliminate adware from the system and then initiate the following steps to restore Safari's settings.
-
Remove dangerous extensions
Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences.
-
Here, select Extensions and look for Potential threats detected or other suspicious entries. Click on the Uninstall button to get rid each of them.
-
Reset Safari
Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari....
-
Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete Potential threats detected removal process.
After uninstalling this potentially unwanted program (PUP) and fixing each of your web browsers, we recommend you to scan your PC system with a reputable anti-spyware. This will help you to get rid of Potential threats detected registry traces and will also identify related parasites or possible malware infections on your computer. For that you can use our top-rated malware remover: FortectIntego, SpyHunter 5Combo Cleaner or Malwarebytes.
How to prevent from getting adware
Protect your privacy – employ a VPN
There are several ways how to make your online time more private – you can access an incognito tab. However, there is no secret that even in this mode, you are tracked for advertising purposes. There is a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of Private Internet Access VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise. Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and Private Internet Access VPN will let you browse the Internet without a feeling of being spied or targeted by criminals.
No backups? No problem. Use a data recovery tool
If you wonder how data loss can occur, you should not look any further for answers – human errors, malware attacks, hardware failures, power cuts, natural disasters, or even simple negligence. In some cases, lost files are extremely important, and many straight out panic when such an unfortunate course of events happen. Due to this, you should always ensure that you prepare proper data backups on a regular basis.
If you were caught by surprise and did not have any backups to restore your files from, not everything is lost. Data Recovery Pro is one of the leading file recovery solutions you can find on the market – it is likely to restore even lost emails or data located on an external device.
- ^ Trojan horses are the most dangerous online threats of 2017. CTV News. Bella Media.
- ^ Doug Olenick. Tech support scams using browser lockers rising. SC Media. In-depth, unbiased business and technical information.
- ^ Dieviren. Dieviren. Security news oriented to German-speaking netizens.