popup

Hi! I've had MacOS Catalina 10.15.1 for a month now. A few days ago I've received a popup: “p will damage your computer. You should move it to Trash." with no other information. I have done that but it came back the next day. I don’t have any other problems. I just want to know what is it and how serious it is?

Posted on Nov 15, 2019 12:04 PM

Reply
20 replies

Nov 15, 2019 12:37 PM in response to amila289

More information would help, but whatever it is is probably being loaded as a User Launch Agent, System Launch Agent, or a Login Item.


To help determine what it may be proceed as follows.


Navigate to the following folder, and post its contents in a screenshot:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:





... and click the Go button.


A Finder window will open. Take a screenshot showing all that folder's contents, and post it in a reply. To learn how to do that please read the Appendix in the following User Tip: Writing an effective Apple Support Communities question.


Usually, there is nothing in that folder so don't be surprised to find it empty. The reason for starting with that folder is to eliminate other potential causes before proceeding with steps that will identify and eradicate whatever is affecting that Mac.


There will be additional instructions to follow and this is just the first step.

Nov 15, 2019 2:56 PM in response to JackieL46

No worries; I think you provided sufficient information for that particular folder. Two of the files in it need to be removed (specifically the first and the last), but please don't do that just yet. Otherwise they might just reappear again and again. The processes causing the popup need to be terminated and other potential hiding places need to be eliminated to preclude that from happening.


In an abundance of caution please examine the contents of two additional folders which I'll describe presently.


  • You can't paste images here—you have to post them using the "picture" icon shown below:

In the same manner as the above, open the following folder:


/Library/LaunchDaemons


To open that folder, copy and paste it in the Finder's Go menu > Go to Folder... field. It should look like this:



Once again ensure all its files and their names are readable, take a screenshot, and post it.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two.


In the end, you will have captured and posted the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Nov 15, 2019 7:42 PM in response to amila289

Yes.


Whatever it is, those things don't get installed without your consent. The usual method is to deceive you into willfully granting it. To learn how that happens, read How to install adware.


Upon detecting that junk, macOS Catalina introduced protections against such things actually running and affecting your Mac's operation, hence the dialog. Dragging the responsible Launch Daemons / Launch Agents to the Trash as I described hammers the last nail in its coffin, and the popup warning will no longer appear.


As I wrote a couple years ago:


John Galt wrote:
Upon encountering a seemingly helpful but unsolicited dialog offering to "clean" your Mac of adware (or anything else for that matter), your immediate reaction should be not only no but h**l no. As in: Want to optimize your Mac? No. Want to clean your Mac? NO. Want to protect your Mac? NO. Why not, it's free and 100% safe? NO!
Channel your inner Captain Rex Kramer.

Nov 16, 2019 5:01 AM in response to Finark

Finark wrote:

Not sure what this is but getting frustrated with Catelina so far!


???


You installed malicious software. That's what it is. Catalina is protecting your Mac from its effects. Following my instructions will remove it. How to install adware describes what you need to learn so that you don't make that mistake again.


John Galt wrote:

Upon detecting that junk, macOS Catalina introduced protections against such things actually running and affecting your Mac's operation, hence the dialog. Dragging the responsible Launch Daemons / Launch Agents to the Trash as I described hammers the last nail in its coffin, and the popup warning will no longer appear.


Nov 16, 2019 12:57 PM in response to FXVS

FXVS wrote:

I have the same problem, but the solutions you offer are too complicated for me t understand. Is there a "101" version for dummies as to how I handle this please?

Going to Malwarebytes, the site itself, downloading the current version, and running a free scan may be sufficient. Apple Support advise customers to do this (though I have no direct experience of this 'p' file). I'm sure John Galt will tell us if there are enhancements required over and above that. His route is precise, is capable of being followed, and is complete

Nov 16, 2019 5:18 PM in response to FXVS

FXVS wrote:

I have the same problem, but the solutions you offer are too complicated for me t understand. Is there a "101" version for dummies as to how I handle this please?


The first thing you need to do is to start your own Discussion, one that you own and can control, for several reasons. Even though the dialog may be completely identical, the "p" process is generated by uniquely named files. That means each Mac needs to be individually examined. That also means the removal instructions for one user may not apply to someone else. For example, you observed strange behavior using Word. Others might not. That problem may or may not be related to this one.


The general procedure is to examine the contents of the three folders I explained. Some people need explicit instructions to get even that far, and in such cases I can back up a step or two to describe how to begin. Then, they need to capture a screenshot of that folder, and post it in a reply to their Discussion—two more steps. There is at least one example in this Discussion lacking that information. Finally, they need to remove the files causing the behavior, and in the interest of being thorough, examine even more locations and correct potentially altered settings.


More experienced people can basically follow along and infer how to fix things on their own. That's an ideal solution secondary only to learning how not to install such things to begin with. It's understandable to become deceived... but only once.


To start your own Discussion click Post > Discussion at the top of this page. You can provide the screenshots in it, but if you need help doing that, ask.


Nov 16, 2019 4:29 AM in response to Finark

Finark wrote:

I have the same issue and it's repeated over the past few days. I followed the instructions and here is what I copied for the LaunchAgents folder on my Mac...

com.7076887940660...751.7864666562.plist
com.adobe.GC.Invoker-1.0.plist
com.ArtemisSearch.plist

Not sure what this is but getting frustrated with Catelina so far!

This is nothing to do with Catalina. It is to do with accidentally being fooled into inviting these things onto your machine. That can happen to anyone in a moment of inattention. What you need to do is to ensure that it has been removed

Nov 15, 2019 4:55 PM in response to John Galt

Hi Mr. Galt and thank you for replying. I'm sorry for not answering you earlier. This is the popup that I have a problem with. When I run it, it just opens the Terminal and says "killed". It seems like this does not effect anything else, it just pops up from time to time. If you know anything about how big of a problem this is thank you for that information and here are all the screenshots that you've asked for. Thank you again.


Popup:



~/Library/LaunchAgents:



/Library/LaunchDaemons:



/Library/LaunchAgents:



I don't mind moving it to Trash every time, but it's just annoying.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

popup

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.