"Navlibx will damage your computer" pop up malware

[Neal]

I need help getting rid of this malware that I got during installation of OS  Catalina version 10.15.1 on my 2014 MacBook air.

I have tried two different scan tools but neither recognized  it.  It's annoying and pops up every minute and I am afraid it will seek

entry into private accounts.  Help!

Neal

[alvarnell]

That kind of pop-up in the browser is not malware. It is a scam webpage trying to convince you that you have malware, in the hopes that you'll either install a scam product to "remove the malware," or that you'll call a scam number listed in the message and pay the scammers to "remove the malware." (When there's no actual malware.)

Do not follow any of the instructions in that message. Close that browser window/tab, and if it repeats, avoid the site you were visiting at the time. It can also be helpful to install an ad blocker, as many of these pop-ups are caused by malvertising (malicious advertising). Malwarebytes actually has browser extensions called Malwarebytes Browser Guard that block ads, trackers, clickbait, scams, and known malware sites. It's available for Chrome and Firefox, but not yet for Safari.

[Neal]

Okay, good information and thanks for getting back so fast!

I will try your suggestion and let you know if it worked.

I have no idea what this pop up is referring to as I cannot relate it to a particular site or email...just started when I installed Catalina 10.15.1.

It makes sense that it would confuse me as it really did.

Neal

[Neal]

By the way, I use Safari and always have.  

Do you have a good recommendation for a Browser Guard for Safari Macbooks?

Neal
 

[Gr8fur]

27 minutes ago, Neal said:

Do you have a good recommendation for a Browser Guard for Safari Macbooks?

Hey Neal,

I use AdBlock Plus and it's a very effective and comprehensive tool for blocking popups and ads on my MacBook Pro.  It works on Safari, Chrome, and Firefox.

Give it a shot.  https://adblockplus.org

[treed]

This actually does not sound like an ad in a browser, it sounds like a Catalina notification about an app that is either identified as malicious by Apple or that is not properly signed & notarized. So it could either be something malicious that Apple is not allowing to run, or it could be something legitimate that's damaged or otherwise not deemed safe to run.

In order to troubleshoot this, we would need to get some information from you. Since it's wise to be skeptical about someone asking you to run a data-gathering tool on a forum, I'd advise submitting a support ticket here:

https://support.malwarebytes.com/community/contactsupport/pages/home-support

Then I or someone else will be in touch.

[pondus]

found this online, seems it may be a MacOS Catalina / Norton conflict ?

https://www.reddit.com/r/MacOSBeta/comments/cw8s6d/navlibx_will_damage_your_computer_error_keeps/

https://discussions.apple.com/thread/250721816

 

[Neal]

Great info and thanks.  My wifi provider is Comcast and, for years they provide as part of their service anti-virus software.

Maybe the problem is the older version is installed.  I'm going to check that out and will get back to you.

Both Norton and Symantec were mentioned.

Neal

[treed]

Sounds good. If Norton doesn't end up being the source of the problem, please don't hesitate to contact support so we can investigate further.

[Neal]

Hi Folks,

Apparently it was the older version of Norton Symantec causing the popup.  I contacted Comcast Support and was directed to the Apple Technical team.  

After giving them control on my MacBook they were able to remove the old version of Symantec and then we installed the new version.  There were many restarts 

through the process to get things to work right, but I had a good tech guy that would not give up and neither did I.

My thanks to everyone and Pondus, your link was what I needed to find the problem.  

Neal