How to Scan Your Mac for Viruses and Malware (Built-in Protection and Free Checks)
Quick answer: macOS already blocks known malware with XProtect and Gatekeeper, and updates those protections automatically. To check your own Mac, review installed apps, login items, browser extensions and configuration profiles, watch for unfamiliar processes in Activity Monitor, and run an on-device malware scan.
Whether you need extra protection is covered in Does a Mac Need Antivirus? How to Scan Your Mac for Malware in 2026. This guide is the practical checklist.
What macOS already does
Gatekeeper checks that apps come from the App Store or identified developers.
XProtect checks apps against known malware, and Apple updates it in the background.
Notarization means Apple scanned the app before release.
Keep macOS updated so these stay current.
Check your Mac, step by step
| Check | Where | What to look for |
|---|---|---|
| Installed apps | Applications folder | Anything you did not install |
| Login items | System Settings ▸ General ▸ Login Items & Extensions | Unknown names |
| Browser extensions | Safari, Chrome and Firefox extension lists | Unneeded or unfamiliar extensions |
| Profiles | System Settings ▸ Privacy & Security, or General ▸ Device Management | Configuration profiles you did not add |
| Running processes | Activity Monitor | Unfamiliar names with high CPU or network |
| Gatekeeper | System Settings ▸ Privacy & Security | Allow apps from App Store and identified developers |
Warning signs
Browser home page or search changed without your action
Pop-ups and ads when you are not browsing
Apps or extensions you do not remember installing
The Mac is hot or slow with nothing heavy open
Unknown processes using lots of CPU or network
What to do if you find something
Disconnect from the network if you suspect active malware.
Remove the app, extension or profile, and its login item.
Change passwords for important accounts from another device.
Restart and re-scan.
Run an on-device scan
The malware scanner in MacCove Space (part of Unlimited) scans what is installed and running, checks it against known Mac threats, and lists apps that are sending data out over the network so you can review, quit or remove them. It runs on your Mac and complements macOS security.
FAQs
Can a Mac get a virus?
Yes, though most threats are adware and trojans rather than classic viruses.
How do I check my Mac for malware for free?
Use the checklist above, which needs no extra software.
Is Activity Monitor enough?
It shows what is running, but it will not tell you what is malicious. Compare unknown names with a web search before quitting.