Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: Popup Warnings of Malware

I got two popup warnings this morning that 'ServiceRecords' and 'ReceiverHelp' will harm my computer (MacBook Pro). These are two applications that, to the best of my knowledge, have been on the computer since it was first purchased.

Having gone through the help information associated with the warnings I moved the two identified applications to the Bin.

Are the applications required for anything? Should I delete them? What happens if I do?

MacBook Pro 13", macOS 10.15

Posted on Feb 27, 2020 1:35 PM

Reply
Question marked as Solved
Answer:
Answer:

Did this popup come via email? If it didn't come from outside, then it was triggered by anti-malware software on the computer. macOS has built-in anti-malware software. But you stated you have none installed by you, correct? In that case I would go ahead and delete the two items. They may not be malware but they aren't part of macOS.

Posted on Feb 27, 2020 1:59 PM

Question marked as Helpful

Mar 2, 2020 10:20 AM in response to GaryDK43 In response to GaryDK43

Hi,

I had the same problem today. I have just spoke to Apple Care who shared my screen and resolved the problem really quickly and efficiently. The advisor prompted me to bin the files and then empty my bin (this required my Mac password).


As a precaution, he suggested I scan my Mac for malware. I did so using the free version of 'Malwarebytes' as he claimed it was very reliable.


I have not recently downloaded anything from the internet which strange - the advisor suggested that due to Mac security updates, the Mac may have only recently identified these files as harmful.


I hope you find this reply useful!


:-)

Mar 2, 2020 10:20 AM

Question marked as Helpful

Feb 27, 2020 3:01 PM in response to Gpc323 In response to Gpc323

From the official Citrix webpage:


https://docs.citrix.com/en-us/citrix-workspace-app-for-mac/install-uninstall.html


I did this today and then installed Citrix Workspace for Mac, which is Citrix's official replacement for Citrix Receiver.


EDIT: Just as a precaution, I clicked on "Show in Finder", which I then simply moved the "offending" files to the Trash Bin, which I then deleted. Afterwards, I then followed the official Citrix uninstall procedure.

Feb 27, 2020 3:01 PM

There’s more to the conversation

Read all replies

Feb 27, 2020 1:55 PM in response to Kappy In response to Kappy

They came up on my screen when I turned on the computer this morning.

I went to open an old Word document via Finder, which had been transferred from the HDD of a Windows based computer, which we had got rid of after changing to Apple devices. There were no other programs running at the time. MS Word started up and the document opened. At the same time got the warning popup about the two items.

Check of the applications' information shows that they were both created in Oct 13 and last opened in Nov 14, which is about the time I got the MacBook Pro.

Feb 27, 2020 1:55 PM

Reply Helpful
Question marked as Solved

Feb 27, 2020 1:59 PM in response to GaryDK43 In response to GaryDK43

Did this popup come via email? If it didn't come from outside, then it was triggered by anti-malware software on the computer. macOS has built-in anti-malware software. But you stated you have none installed by you, correct? In that case I would go ahead and delete the two items. They may not be malware but they aren't part of macOS.

Feb 27, 2020 1:59 PM

Reply Helpful

Feb 27, 2020 2:05 PM in response to Kappy In response to Kappy

Thanks, Kappy. No, didn't come from email, Mail wasn't open at the time. The messages just popped up on the screen.

I do not have any additional Malware or virus software installed, so taking it that it was triggered by the macOS inbuilt program and the two were associated in some way with the old Word document I was opening.


Thanks for your advice and help.

Feb 27, 2020 2:05 PM

Reply Helpful (3)
Question marked as Helpful

Feb 27, 2020 3:01 PM in response to Gpc323 In response to Gpc323

From the official Citrix webpage:


https://docs.citrix.com/en-us/citrix-workspace-app-for-mac/install-uninstall.html


I did this today and then installed Citrix Workspace for Mac, which is Citrix's official replacement for Citrix Receiver.


EDIT: Just as a precaution, I clicked on "Show in Finder", which I then simply moved the "offending" files to the Trash Bin, which I then deleted. Afterwards, I then followed the official Citrix uninstall procedure.

Feb 27, 2020 3:01 PM

Reply Helpful (5)

Feb 27, 2020 9:13 PM in response to GaryDK43 In response to GaryDK43

I had exactly the same problem this morning! (2 pop ups warning about 'ServiceRecords' and 'ReceiverHelp'). I was not doing anything remarkable at the time other than to observe that my network had some momentary problems and my computer restarted on its own. After it came back up, I had the two messages that I could not remove. I rebuilt my HD with TimeMachine going back to last night and the problem persisted. I also tried 2 virus detection apps and they could not find the problem. After seeing this post, I deleted the two files and restarted. Problem resolved. I was not able to uninstall Citrix Receiver (uninstall program became unresponsive) but hopefully this is not a problem.

Feb 27, 2020 9:13 PM

Reply Helpful (2)

Feb 29, 2020 7:16 AM in response to teejay144 In response to teejay144

I will apply the same, but I remain concerned that there could be residual malware on my Mac.


It would be better if Apple (or another reliable vendor) could investigate this and provide a solution quickly to put my mind at rest.


I don't want to have to rebuild my machine.


Feb 29, 2020 7:16 AM

Reply Helpful (1)

Mar 1, 2020 5:01 AM in response to GaryDK43 In response to GaryDK43

Concerned because I logged in on my iMap this morning and received the same two messages, which warns they will "damage your computer". Yikes !!! The two files date back to 2014 and were transferred from my old MacBook Pro to my new iMac when I purchased it a year ago. I've not used my iMac in a week and haven't downloaded any new files recently! Happy, are you sure its safe to delete these?

Mar 1, 2020 5:01 AM

Reply Helpful

Mar 1, 2020 9:52 AM in response to judahbear In response to judahbear

I also got the same messages. Deleted the files after the password prompt, but concerned as well that these just popped up this morning. Strange issue and Mac is usually difficult to hack. It was the citrix files that I had to delete.


I'll update if anything comes up later as a result.

Mar 1, 2020 9:52 AM

Reply Helpful
User profile for user: GaryDK43

Question: Popup Warnings of Malware

Welcome to Apple Support Community
  • A forum where Apple customers help each other with their products. Learn more.
  • Sign up with your Apple ID to get started.