The fastest way to remove malware from a Mac

If your Mac is running slowly, showing pop-up ads you didn't click, or redirecting your browser to unfamiliar websites, malware may be present. The fastest removal path is to restart your Mac in Safe Mode, then use a dedicated malware scanner to find and remove the infection. Most Macs can be cleaned this way in under an hour without paying for software.

Safe Mode prevents background programs from loading, which stops malware from hiding or protecting itself while you scan. After you restart in Safe Mode and run a scanner, a standard restart usually completes the removal. If the malware persists after scanning, or if your Mac won't start normally, you may need to erase and reinstall macOS — a more time-consuming but reliable option.

Key Takeaways

  • Restart your Mac in Safe Mode by holding Shift during startup, which disables background malware and makes scanning more effective.
  • Use a free malware scanner like Malwarebytes for Mac or Avast One to find and remove infections without paying.
  • If malware persists after scanning, back up your files and erase your Mac using Recovery Mode, then reinstall macOS from scratch.
  • Prevent future infections by avoiding downloads from untrusted websites, keeping macOS updated, and disabling browser extensions you don't recognize.

How to restart your Mac in Safe Mode

Safe Mode loads only essential system files and prevents third-party software — including malware — from running automatically. To enter Safe Mode, shut down your Mac completely, then turn it back on while holding the Shift key. Keep holding Shift until you see the login screen. On newer Macs with Apple Silicon chips, restart and hold the power button instead until you see the startup options menu, then select your startup disk and hold Shift.

Once you are logged in, you will see "Safe Mode" in the top-right corner of your screen next to the clock. Your Mac will run noticeably slower because it is only loading core files, but this is normal and temporary. Do not restart yet — this is when you will run your malware scanner.

Scanning and removing malware with free tools

Malwarebytes for Mac is the most widely used free scanner for macOS. Download it from malwarebytes.com on another device or from your Mac while in Safe Mode, then install it. Open Malwarebytes, click the Scan button, and let it run to completion. When the scan finishes, Malwarebytes will show a list of detected threats. Click Remove to delete them.

Avast One is another option if Malwarebytes does not find anything or if you want a second opinion. Download it from avast.com, install it, and run a full system scan. Both tools are free for basic malware removal and do not require payment to delete what they find.

After the scan completes and threats are removed, restart your Mac normally by clicking the Apple menu and selecting Restart. Your Mac should return to normal speed and the malware symptoms should stop. If pop-ups, redirects, or slowness continue after removal, the infection may be deeper or your browser may have been compromised separately.

Removing malware from your browser

Malware often installs browser extensions or changes your search engine and homepage without your permission. Open your browser settings and look for unfamiliar extensions or search engines you did not install. In Safari, go to Safari menu > Settings > Extensions and remove anything suspicious. In Chrome, go to Settings > Extensions and delete anything you don't recognize.

Check your homepage and search engine settings as well. If your browser redirects to a search page you did not choose, change it back to Google, Bing, or your preferred engine. Clear your browser cache and cookies by going to Settings > Privacy or History and selecting the option to clear browsing data. Some malware hides in cached data and will resurface if you skip this step.

When to erase and reinstall macOS

If malware persists after scanning with Malwarebytes and Avast, or if your Mac will not start normally, erasing your drive and reinstalling macOS is the most reliable removal method. This deletes everything on your Mac, so back up your files first using Time Machine or by copying them to an external drive or cloud storage.

To erase your Mac, restart and hold Command + R to enter Recovery Mode. Click Disk Utility, select your main drive, and click Erase. Choose APFS as the format and give it a name. After erasing completes, close Disk Utility and select Reinstall macOS. Your Mac will download and install a fresh copy of the operating system, which removes all malware along with everything else on the drive. Reinstalling takes 30 minutes to an hour depending on your internet speed.

After reinstalling, restore your files from your backup. Do not restore from a Time Machine backup made while malware was present — instead, manually copy files you know are safe, like documents and photos. Avoid restoring applications from the infected backup; download fresh copies from the App Store or official websites instead.

Preventing malware on your Mac going forward

Most Mac malware arrives through downloads from untrusted websites, fake software installers, or malicious email attachments. Avoid downloading software from anywhere except the App Store or the official website of the software maker. If a website asks you to download a codec, media player, or browser extension you have never heard of, close the page instead.

Keep macOS updated by going to System Settings > General > Software Update and installing updates as soon as they are available. Updates patch security holes that malware exploits. Turn on automatic updates so you do not have to remember to check manually.

Review your browser extensions regularly and remove any you no longer use. Malware sometimes hides as a legitimate-looking extension that collects your browsing data or injects ads. If you see an extension you do not remember installing, delete it immediately.

Frequently Asked Questions

Can malware on a Mac steal my passwords and credit card information?

Yes. Some malware logs keystrokes or intercepts form data to capture passwords and payment information. If you suspect malware was on your Mac while you entered sensitive information, change your passwords from a different device and monitor your credit card and bank accounts for unauthorized charges. Contact your bank if you see suspicious activity.

Is it safe to use my Mac while it is in Safe Mode?

Safe Mode is safe to use, but it is designed for scanning and troubleshooting, not everyday work. Your Mac will run slowly, some features will not work, and you cannot access network drives or printers. Use Safe Mode only to scan for malware, then restart normally.

What if Malwarebytes and Avast find nothing but my Mac still has malware symptoms?

Malware sometimes hides in system files or uses techniques that free scanners miss. Try running the scanners again in Safe Mode, or download a different scanner like Kaspersky or Norton. If symptoms persist after multiple scans, erasing and reinstalling macOS is the most reliable solution.

Do I need antivirus software on my Mac?

macOS includes built-in malware protection called XProtect that scans files as you download them. For most users, keeping macOS updated and avoiding untrusted downloads is enough. Paid antivirus software offers additional features but is not required unless you download files frequently from risky sources.

How long does it take to erase and reinstall macOS?

Erasing your drive takes 5 to 10 minutes. Downloading and installing macOS takes 30 minutes to an hour depending on your internet speed. Restoring your files from backup can take several hours if you have a large amount of data. Plan for at least two hours total if you include file restoration.