Updates" drive and iSCPreboot in Finder

I have a drive called Updates showing up in my Finder. I tried to eject it.


The message that I get first when trying to eject this drive (assuming it could be malware) was that ejecting “iSCPreboot” might cause problems with the disk.


Searching Update and this file/drive name helped me find another thread about this, that it’s related to the computer updates but it should not be appearing there. Please help me with understanding this.

MacBook Air

Posted on Dec 13, 2025 7:51 AM

Reply
Question marked as Top-ranking reply

Posted on Dec 13, 2025 2:45 PM

Those system volumes should be hidden from view by default in macOS. Typically they are mounted at the "/System/Volumes" location and are hidden from view even in the Finder. Someone or something has likely modified the normal behavior of macOS which has exposed these volumes within the Finder.


If you are using any anti-virus software, cleaning/optimizer apps, or third party security software, then uninstall them by following their developer's instructions. These types of apps are not needed on a Mac and usually cause more problems than they solve and would be the most likely reason the "Update" volume has appeared in the Finder's sidebar.


Have you tried removing the "Update" volume from the Finder's sidebar? Try dragging the "Update" item from the sidebar.....you should see an "X" appear, or you may be able to right-click or Control-click on the "Update" item & select "Remove from Sidebar" on the pop-up menu. Hopefully it won't reappear on its own.


And stay out of that "Update" volume as there is nothing in there for anyone. It is only for the macOS system use. If you happen to find a way to modify something there, it will likely break macOS and you likely won't realize it until the next time you reboot the system.

2 replies
Question marked as Top-ranking reply

Dec 13, 2025 2:45 PM in response to homschlrmom

Those system volumes should be hidden from view by default in macOS. Typically they are mounted at the "/System/Volumes" location and are hidden from view even in the Finder. Someone or something has likely modified the normal behavior of macOS which has exposed these volumes within the Finder.


If you are using any anti-virus software, cleaning/optimizer apps, or third party security software, then uninstall them by following their developer's instructions. These types of apps are not needed on a Mac and usually cause more problems than they solve and would be the most likely reason the "Update" volume has appeared in the Finder's sidebar.


Have you tried removing the "Update" volume from the Finder's sidebar? Try dragging the "Update" item from the sidebar.....you should see an "X" appear, or you may be able to right-click or Control-click on the "Update" item & select "Remove from Sidebar" on the pop-up menu. Hopefully it won't reappear on its own.


And stay out of that "Update" volume as there is nothing in there for anyone. It is only for the macOS system use. If you happen to find a way to modify something there, it will likely break macOS and you likely won't realize it until the next time you reboot the system.

Dec 13, 2025 9:00 PM in response to homschlrmom

homschlrmom wrote:

I have a drive called Updates showing up in my Finder. I tried to eject it.

The message that I get first when trying to eject this drive (assuming it could be malware) was that ejecting “iSCPreboot” might cause problems with the disk.

Back when I was using a "managed computer" for a company, I recall those volumes appearing. When I saw their contents, I decided to leave them alone and ignore them.


By chance, is your computer configured by someone other than you, or is it a "managed computer" with configuration profiles? Did you obtain it new or used? Managed computers are typically for an employer or school.

Updates" drive and iSCPreboot in Finder

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.