“Congratulations, You Won” virus

The “Congratulations, you won” virus is usually removed by stopping suspicious processes, deleting the unwanted app behind the pop-ups, resetting infected browser settings, and scanning your Mac for hidden malware. MacKeeper’s Antivirus gives you an easier way to detect and block these threats with real-time protection, helping you scan your Mac for malicious files, quarantine suspicious items, and keep your files safe.

System Requirements: macOS 10.11 or later

More than 60 Million Downloads

i

AV-TEST certified

i

Notarized by Apple

i

AV-TEST is an independent lab that checks the effectiveness of antivirus apps against real malware samples.

The notarization by Apple is a security measure to check if software is free from malicious components.

Trustpilot is an independent digital platform that hosts insightful and honest consumer reviews.

“Congratulations, You Won” virus
Written By   Taras Holota
Published: March 20, 2026

The “Congratulations, You Won” virus is a scam pop-up tied to browser hijackers, adware, or other unwanted programs that flood your device with fake prize alerts, redirects, and intrusive ads. To remove it, close the browser, delete suspicious apps or extensions, reset browser settings, and run a malware scan immediately.

What is the “Congratulations, you won” pop-up virus?

The “Congratulations, you won” pop-up virus is a scam notification tied to adware or browser hijackers that tricks users into believing they’ve won a prize such as a phone, gift card, or cash reward. Instead of giving a prize, it attempts to collect personal information, install unwanted programs, or redirect you to malicious websites that may compromise your device and privacy.

How to spot the “Congratulations, you won” scam?

You can spot the “Congratulations, you won” scam by looking for fake prize alerts that appear suddenly while browsing, often claiming you’ve won an iPhone, gift card, or cash reward. These pop-ups usually pressure you to act quickly by completing a survey or clicking a button. Be sure that legitimate companies rarely award prizes through random browser notifications. If the message redirects you to unfamiliar websites, asks for personal details, or keeps reappearing across pages, it’s most likely a scam.

A note from our experts:

 

When dealing with threats like fake prize pop-ups or browser hijackers, it’s important to make sure no hidden malware remains on your device. MacKeeper protects your Mac, safeguarding your files, apps, and system folders from malicious activity. Its Antivirus feature scans your entire system and detects suspicious programs before they can steal personal data or compromise your privacy.

 

Here’s how to secure your Mac with MacKeeper’s Antivirus:

  1. Download, install, and open MacKeeper on your Mac or MacBook.
  2. In the left sidebar, select Antivirus under the Security section.
  3. Click Start Scan to perform a full system scan for malware and potentially unwanted programs.
  4. Wait while the tool checks your files, apps, and system folders for hidden threats.
  5. Review the detected items in the scan results window.
  6. Select suspicious files and quarantine them to stop further activity.
  7. Restart your Mac, then permanently delete the quarantined items if they’re confirmed threats.
Open MacKeeper and locate the Antivirus section in the left sidebar to access security tools for scanning your Mac for malware and threats.
Step 1. Find the Antivirus section in the left-side menu bar
Click Start Scan in MacKeeper's Antivirus to begin scanning your Mac for malware, suspicious files, and potentially unwanted programs.
Step 2. Click the Start Scan button to launch the scanning process

How to remove the “Congratulations, you won” virus on Mac?

To remove the “Congratulations, you won” virus on Mac, close the suspicious browser tab immediately and avoid clicking the pop-up. Then check for unknown apps, remove suspicious browser extensions, and reset your browser settings. Scan your Mac with reliable antivirus software to detect hidden adware, browser hijackers, or unwanted programs that may be generating the scam alerts.

1. Update macOS

Keeping your system current is one of the simplest ways to eliminate vulnerabilities that malware exploits. From our experience, when you update Mac software regularly, you close security gaps that adware, browser hijackers, and pop-up threats often rely on. Updating also refreshes system protections and removes outdated components that may allow malicious scripts to run.

 

Check for system updates and install them using the steps below:

  1. Click the Apple menu in the top-left corner of your screen.
  2. Select System Settings from the dropdown list.
  3. Navigate to General in the sidebar.
  4. Click Software Update.
  5. Wait while macOS checks for available updates.
  6. If an update appears, click Update Now.
  7. Enter your administrator password if prompted.
  8. Allow the update to download and install.
  9. Restart your Mac if prompted to do so.
  10. After restarting, verify that the latest macOS version is installed.
Click the Apple menu in the top-left corner of your screen and select System Settings to access macOS preferences and system configuration options.
Step 1. Click the Apple menu in the top-left corner of your screen and select System Settings from the dropdown list
In System Settings, select General in the sidebar and click Software Update to check for available macOS updates and security patches.
Step 2. Navigate to General in the sidebar and click Software Update
If a macOS update is available, click Update Now to download and install the latest system improvements and security fixes.
Step 3. If an update appears, click Update Now

2. Disable unwanted app processes

Stopping suspicious processes is often the fastest way to interrupt active infections. Based on our tests, many forms of pop-up malware constantly run background processes that trigger fake prize alerts or redirect you to malicious websites.

 

Stop suspicious background activity by following this process:

  1. Click the Apple menu and choose Go in the menu bar.
  2. Select Utilities from the dropdown menu.
  3. Open Activity Monitor.
  4. Review the list of running processes.
  5. Look for unfamiliar or suspicious applications using high CPU or memory.
  6. Select the suspicious process.
  7. Click the X button at the top of the window.
  8. Choose Force Quit to terminate the process.
  9. Repeat the steps for other suspicious processes.
  10. Close Activity Monitor once the processes are stopped.
Click the Apple menu, open Go in the menu bar, then select Utilities from the dropdown to access system tools like Activity Monitor.
Step 1. Click the Apple menu and choose Go in the menu bar and select Utilities from the dropdown menu
Open Activity Monitor from the Utilities folder to view running processes and identify apps or background tasks using system resources.
Step 2. Open Activity Monitor
In Activity Monitor, select the suspicious process from the list and click the X button at the top to stop the task and end its activity.
Step 3. Select the suspicious process and click the X button at the top of the window
When prompted, click Force Quit to terminate the selected process and stop the suspicious app or background activity immediately.
Step 4. Choose Force Quit to terminate the process

3. Delete suspicious apps

Malicious pop-ups often originate from hidden adware installed alongside other software. In our experience, learning how to remove adware virus threats usually starts with identifying unfamiliar apps that appeared after installing freeware or clicking suspicious links.

 

We’ll guide you now how to remove potentially harmful programs from your Mac—follow these steps:

  1. Open Finder from the Dock.
  2. Click Applications in the sidebar.
  3. Review the list of installed programs.
  4. Identify unfamiliar apps or programs installed recently.
  5. Right-click the suspicious application.
  6. Select Move to Bin.
  7. Enter your administrator password if required.
  8. Open the Bin from the Dock.
  9. Click Empty Bin to permanently remove the app.
  10. Restart your Mac to ensure the removal is complete.
Open Finder, select Applications in the sidebar, locate unfamiliar apps, then choose Move to Bin to remove suspicious programs from your Mac.
Step 1. Open Finder from the Dock and click Applications in the sidebar. Identify unfamiliar apps, then select Move to Bin
Open the Bin from the Dock and click Empty Bin to permanently delete removed apps and free up space on your Mac.
Step 2. Open the Bin from the Dock and click Empty Bin

4. Get rid of user profiles

Sometimes malware hides inside user configuration profiles that automatically launch harmful scripts or browser settings at login. As our team has observed during malware removal tests, a virus from email attachments or suspicious downloads may create hidden profiles that maintain control over system preferences or browser behavior.

 

Follow this method to remove suspicious user profiles:

  1. Click the Apple menu and open System Settings.
  2. Navigate to Login Items & Extensions.
  3. Select the current user account.
  4. Click Login Items.
  5. Review all items that start automatically at login.
  6. Look for unknown or suspicious entries.
  7. Select the unwanted item.
  8. Click the - button to remove it.
  9. Repeat for any other suspicious login items.
  10. Restart your Mac to apply the changes.
Open System Settings, go to General, then select Login Items & Extensions to view apps that automatically start when you log in.
Step 1. In System Settings, go to General > Login Items & Extensions
Review apps that start at login, select a suspicious item, and click the – button to remove it from Login Items and stop automatic launch.
Step 2. Review all items that start automatically at login, select one, and click the - button to remove it

How to delete “Congratulations You Won” virus from browser?

To get rid of the “Congratulations, you won” pop-ups from your browser, start by closing the malicious tab and avoiding interacting with the fake prize alert. Then remove suspicious extensions, clear browsing data, and reset your browser settings to eliminate redirects. Finally, run a full malware scan to detect hidden adware or browser hijackers that may be generating the scam notifications and causing the pop-ups to reinstall.

1. Safari

If scam notifications keep appearing in Apple’s browser, we suggest resetting Safari settings, as it usually helps restore normal browsing. You can also compare suspicious extensions with a viruses list online to see if they’re associated with known browser hijackers.

 

Use the following Safari cleanup routine:

  1. Open Safari, click Safari → Settings, and check the General tab to verify your homepage isn’t set to a suspicious website.
  2. Go to Extensions, review installed add-ons, and click Uninstall for any unknown extension.
  3. Open Websites → Notifications, then disable "Allow websites to ask for permission to send notifications."
  4. Navigate to Privacy → Manage Website Data, then click Remove All to delete stored site data.
Open Safari, go to Safari → Settings, and check the General tab to ensure your homepage isn't set to a suspicious or unfamiliar website.
Step 1. Open Safari, click Safari → Settings, and check the General tab to verify your homepage isn’t set to a suspicious website
Open Extensions in Safari Settings, review installed add-ons, and click Uninstall for any unfamiliar or suspicious extension.
Step 2. Go to Extensions, review installed add-ons, and click Uninstall for any unknown extension
Open Websites → Notifications in Safari Settings and disable Allow websites to ask for permission to send notifications to block spam alerts.
Step 3. Open Websites → Notifications, then disable "Allow websites to ask for permission to send notifications"
Go to Privacy → Manage Website Data in Safari Settings to view and manage stored cookies, cache, and other website data saved on your Mac.
Step 4. Navigate to Privacy → Manage Website Data
Click Remove All to delete stored website data, including cookies and cache files, from Safari on your Mac.
Step 5. Click Remove All to delete stored site data

2. Google Chrome

In Chrome, these fake prize alerts are usually tied to browser hijackers or malicious extensions. As our tests show, resetting the browser configuration is the most effective way to remove redirects, as it disables harmful add-ons and restores the original settings.

 

Reset Chrome using the steps below:

  1. Launch Google Chrome, click the three-dot menu, and open Settings.
  2. Scroll to Reset settings and select Restore settings to their original defaults.
  3. Confirm by clicking Reset Settings to remove suspicious extensions and reset search engines.
  4. Restart Chrome and verify that the pop-ups and redirects are gone.
  5. Reinstall only trusted extensions from the official Chrome Web Store.
Open Google Chrome and click the three-dot menu in the top-right corner to access browser options and settings.
Step 1. Launch Google Chrome and click the three-dot menu
From the Chrome menu, select Settings to open the browser configuration page and manage privacy, extensions, and security options.
Step 2. Open Settings
Scroll to Reset settings in Chrome Settings and select Restore settings to their original defaults to reset the browser configuration.
Step 3. Scroll to Reset settings and select Restore settings to their original defaults

3. Mozilla Firefox

Firefox includes a built-in troubleshooting tool that can quickly remove hijacked settings. From our expertise, the Refresh Firefox feature works well for removing congratulations-you-won scams caused by malicious extensions or altered browser preferences.

 

Restore Firefox safely using this method:

  1. Open Mozilla Firefox, click the menu icon, and select Help → More Troubleshooting Information.
  2. Click Refresh Firefox, then confirm the reset when prompted.
  3. Wait while Firefox removes extensions and restores default settings.
  4. Restart the browser automatically and verify normal browsing behavior.
  5. Install only trusted extensions after confirming that the pop-ups no longer appear.
Open Mozilla Firefox, click the menu icon in the top-right corner, and select Help to access troubleshooting and support tools.
Step 1. Open Mozilla Firefox, click the menu icon, and select Help
In the Help menu, click More Troubleshooting Information to open Firefox's diagnostic page with options to reset or refresh the browser.
Step 2. Click More Troubleshooting Information
Click Refresh Firefox, then confirm the reset when prompted to remove extensions, restore default settings, and fix browser issues.
Step 3. Click Refresh Firefox, then confirm the reset when prompted

Conclusion

The “Congratulations, you won” virus is a deceptive pop-up scam designed to trick users into sharing personal data or installing unwanted programs. In this guide, we showed how to recognize the warning signs and remove the threat by updating macOS, stopping suspicious processes, deleting unknown apps, and resetting affected browsers.

 

For stronger protection going forward, we highly recommend that you consider using MacKeeper, which offers real-time Antivirus protection, helping scan files, apps, and system folders for hidden malware. Running regular scans with our solution helps detect suspicious activity early and keeps your Mac protected from similar pop-up threats.

Use your Mac to the fullest! Sign up and get:
Effective tips on how to fix Mac issues
Reliable advice on how to stay safe online
Mac-world news and updates

Thank you!

You’ll love exploring your Mac with us.

Oops, something went wrong.

Try again or reload a page.

Here’s another sign you need to upgrade your macOS ASAP:

30% off your MacKeeper subscription

Сopy the code now and use it in the MacKeeper checkout after the upgrade.

Copy Code

Please be aware that this code cannot be combined with any other discounts, offers, or promotions.

Contents

Unlocked
PC

MacKeeper - your all-in-one solution for more space and maximum security.

Try Now

Read more

Are Apple Computers More Secure than Windows?
Are Apple Computers More Secure than Windows?
How to Remove Trovi from Mac
How to Remove Trovi from Mac
arrow

Run Application

step_1

Click Continue

step_2

Click Install

step_1

Your macOS version is lower than OS 10.11. We’d like to offer you MacKeeper 4 to solve the cleaning, privacy, and security issues of your macOS.