How To Stop McAfee Pop-Ups On Mac: Step-by-Step Removal Guide

Persistent McAfee notifications on macOS typically stem from authorized web browser push permissions, residual files left over from an incomplete software installation, or adware scripts running background launch daemons. To stop these pop-ups permanently, you must systematically revoke browser push permissions, run the native command-line uninstaller, and purge system launch files. This technical checklist will completely clean your macOS system directories and stop all unwanted alert prompts in under 15 minutes.

Pre-Removal Diagnostics & System Checklist

Before executing any system changes, you must identify whether your Mac is suffering from legitimate McAfee subscription renewal reminders, deceptive browser-based notification spam, or malicious background configuration profiles. Identifying the precise origin of the alerts prevents unnecessary system modifications and ensures you use the correct cleanup strategy.

Operational Requirements & Diagnostic Tooling

• Administrative Access: You must have the macOS administrator password to execute terminal commands and delete system-level library files.
• Target Browsers: Ensure Safari, Google Chrome, and Mozilla Firefox are closed during application uninstallation, but available for notification configuration.
• Required macOS Tools: Finder, Terminal (located in /Applications/Utilities), Activity Monitor, and System Settings.
• System Budget & Execution Time: $0 (no premium tools are required); estimated completion time is 10 to 12 minutes.
• Execution Safeguard: Perform a standard Time Machine backup before modifying system library folders or running sudo commands in the terminal.

Detailed Technical Walkthrough to Eradicate McAfee Alerts

Follow these procedures in sequence to ensure both browser-level notifications and deep-system daemon processes are entirely terminated.

Step 1: Revoke Web Browser Push Notification Permissions

Most modern "McAfee Virus Detected" pop-ups are not generated by installed applications. Instead, they are malicious web push notifications from unauthorized sites exploiting your browser’s notification API to mimic native macOS system alerts.

Cleaning Apple Safari

1. Open Safari and click Safari in the top menu bar, then select Settings (or Preferences on older macOS versions).
2. Click on the Websites tab at the top of the settings window.
3. In the left sidebar, scroll down and select Notifications.
4. Examine the list on the right. Look for any unrecognized websites, especially those with names containing "mcafee", "security", "system-update", or suspicious IP addresses.
5. Highlight the suspicious domain and click the Remove button, or toggle the drop-down menu next to it from Allow to Deny.
6. Turn off the checkbox at the bottom that reads Allow websites to ask for permission to send notifications to block future subscription prompts.

Cleaning Google Chrome

1. Launch Google Chrome, type chrome://settings/content/notifications in the address bar, and press Enter.
2. Under the Default behavior section, ensure your preferences are set appropriately.
3. Scroll down to the Allowed to send notifications section.
4. Locate any suspicious URLs or entries associated with McAfee-related phishing attempts.
5. Click the three vertical dots (More actions) next to the offending domain and select Remove or Block.

Cleaning Mozilla Firefox

1. Open Firefox, type about:preferences#privacy in the address bar, and press Enter.
2. Scroll down to the Permissions section and locate Notifications.
3. Click the Settings... button next to Notifications.
4. Scroll through the list of websites, select any unauthorized or McAfee-impersonating domains, and click Remove Website.
5. Check the box at the bottom labeled Block new requests asking to allow notifications to stop future alerts, then click Save Changes.

Step 2: Execute the Native McAfee Uninstallation Command

If you have previously installed a legitimate suite of McAfee Security, McAfee LiveSafe, or McAfee Internet Security, dragging the application icon directly from your Applications folder to the Trash will not delete the persistent background processes. You must run the dedicated uninstaller or execute its command-line counterpart.

1. Open Finder and navigate to the Applications folder.

2. Search for any application named McAfee Uninstaller or McAfee Multi-Access Uninstaller.

3. If found, double-click the uninstaller application, click Continue, provide your macOS administrator username and password, and follow the on-screen prompts to complete the removal.

4. If no visual uninstaller is present, you must use the Terminal to run the official uninstallation script. Open Finder, go to Applications, then Utilities, and open the Terminal application.

5. In the Terminal window, type the following command exactly as written:

   sudo /usr/local/McAfee/uninstallCH

6. Press Enter. The Terminal will prompt you for your Mac’s administrator password. Type your password (no characters will appear on the screen for security reasons) and press Enter.

7. Wait for the terminal script to output a confirmation message showing that the program files have been successfully uninstalled, then restart your Mac.

Warning: Running commands with "sudo" grants administrative privileges to make major system alterations. Ensure there are no typographical errors in your paths before executing commands in the Terminal.

Step 3: Purge Residual LaunchAgents, LaunchDaemons, and Configuration Files

Even after running the uninstaller, legacy McAfee components often remain in hidden system Library folders. These plist files act as triggers that launch background updates and marketing alert daemons every time your Mac boots up.

1. Click on an empty space on your desktop to ensure Finder is active.

2. Press Command + Shift + G on your keyboard to launch the Go to Folder dialog box.

3. Copy and paste the following folder path into the search bar, then press Enter:

   ~/Library/LaunchAgents

4. Browse the directory for any file containing the term "mcafee" or "siteadvisor" (for example, com.mcafee.advisor.lst.plist). Select these files and drag them to the Trash.

5. Open the Go to Folder dialog box again by pressing Command + Shift + G, and navigate to this path:

   /Library/LaunchAgents

6. Review the system-wide agents for any McAfee plists and move them to the Trash. You will be prompted to enter your administrator password to authorize this action.

7. Open the Go to Folder window once more and navigate to:

   /Library/LaunchDaemons

8. Locate any background helper daemons associated with McAfee (such as com.mcafee.virusscan.plist or com.mcafee.agent.plist). Drag these files directly to the Trash.

9. Finally, navigate to:

   /Library/Application Support

10. Locate any folder simply named McAfee or McAfee Security, right-click it, and select Move to Trash.

11. Empty your system Trash and restart your Mac.

Step 4: Delete Unauthorized Device Profiles and Policies

Adware campaigns and browser hijackers occasionally install hidden Enterprise Configuration Profiles on your Mac. These profiles force settings on your browsers, locking search engines and generating persistent pop-ups that normal settings adjustments cannot fix.

1. Open the Apple menu in the top-left corner of your screen and select System Settings (or System Preferences).
2. Use the search bar in the settings pane to look for Profiles or scroll down to the Privacy & Security menu and look for a Profiles option at the bottom. Note: If no "Profiles" option is visible anywhere, no malicious profiles are installed, and you can skip this step.
3. If the Profiles menu is present, click on it.
4. Look for configuration profiles you did not intentionally install (common adware profiles include names like AdminPrefs, TechSupport, or McAfee Secure Web).
5. Highlight the suspicious profile and click the Minus (-) button at the bottom of the list to delete it. Confirm the action by entering your administrator credentials.

Technical Comparison of Pop-Up Origins and Removal Methods

The table below breaks down the primary vectors for McAfee notifications on macOS, helping you identify exactly what is causing your alerts and how to resolve the issue.

Troubleshooting Persistent macOS Pop-Ups and Errors

When attempting to clean out legacy McAfee software or suspicious adware elements, you may encounter system file locks or stubborn processes. Here is how to resolve the most common removal failures.

The Trash will not empty because a file is "in use"

• Root Cause: A McAfee utility background daemon is still running in memory, preventing macOS from deleting its parent executable file.
• Actionable Fix: Open Finder and go to Applications > Utilities > Activity Monitor. Type "McAfee" into the search bar at the top right of the Activity Monitor window. If any active processes appear (such as fmpd, McAfee Security, or Genie), select them one by one, click the Stop (X) button in the top menu bar, and choose Force Quit. Once all related processes have been killed, empty your Trash again.

Safari or Chrome settings revert to showing pop-ups after system restart

• Root Cause: Your browser's local preferences file is being modified by a hidden adware application running as a background service worker or browser extension.
• Actionable Fix: Open your browser and navigate to the Extensions (or Add-ons) menu. Scan the list for any toolbars, search managers, or extensions you did not install yourself, and click Remove. After cleaning the extensions, clear your browser's complete cache and history database to wipe out any cached service worker files.

The Profiles menu has a greyed-out minus sign and won't let you delete profiles

• Root Cause: The profile is protected by command-line locks injected by advanced malware to maintain system persistence.
• Actionable Fix: Open the Terminal utility and run the command-line profile removal bypass. Type sudo profiles remove -all and press Enter. Enter your admin password when prompted. If the profile remains, type sudo profiles -R -p [Profile Identifier Name] (replace the bracketed text with the exact name shown in System Settings) and press Enter.

Frequently Asked Questions

Why am I getting McAfee notifications when the application is not installed on my Mac?

You are experiencing malicious web push notification spam. When visiting certain streaming, downloading, or ad-heavy websites, you likely clicked "Allow" on a browser prompt asking to verify your age or show notifications. These sites then push advertisements designed to look like official McAfee security alerts directly to your macOS desktop.

Is my Mac infected with a virus when I see "Virus Detected" McAfee pop-ups?

No, these pop-ups are social engineering tactics designed to scare you into buying software subscriptions or downloading real adware. The alerts are pushed through web browser APIs or minor adware scripts and do not indicate that your macOS system has been breached.

How do I stop browsers from asking to show notifications in the future?

You can disable these prompts globally in your browser settings. In Safari, navigate to Settings > Websites > Notifications, and uncheck "Allow websites to ask for permission to send notifications." In Google Chrome, go to Settings > Privacy and Security > Site Settings > Notifications, and select "Don't allow sites to send notifications."

Can I just use a third-party uninstaller to remove McAfee files?

While some third-party app cleaners can find residual files, they often miss deep-system launch daemons located in the root Library folder. Running the official uninstaller script via Terminal or manually searching the Library directories as outlined in this guide is the most reliable way to fully clear your system.

Why do McAfee background processes keep starting after I deleted the application?

This occurs because the launch daemon configuration files (.plist) remain inside the /Library/LaunchAgents or /Library/LaunchDaemons directories. The macOS launchd system reads these files at startup and attempts to run background processes even if you deleted the main application icon. You must delete these plist files to stop the background launches permanently.

Secure Your macOS Environment Against Future Intrusions

Keep your Mac clean and secure by avoiding sketchy software bundles and blocking unnecessary web notification prompts. If you want to keep your system performing at its best without unwanted pop-ups, check out our diagnostic and optimization guides for macOS.