HELP my MacBook Air have a "will damage your computer" message

Please help me this window keeps coming up even tho I didn't download anything and when I press on show in finder the window disappears then show up again please help

MacBook Air 13″, macOS 10.15

Posted on Sep 2, 2020 5:24 PM

Reply
Question marked as Top-ranking reply

Posted on Sep 2, 2020 6:24 PM

To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


Similar questions

16 replies
Question marked as Top-ranking reply

Sep 2, 2020 6:24 PM in response to HernameisShouq

To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


Sep 4, 2020 2:03 PM in response to HernameisShouq

First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".


While in Safe Mode, open those three folders again and confirm their contents remain empty. You can leave the two Google files alone, but everything else should be dragged to the Trash.


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use.


There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.


Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:



If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.


Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.


You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Sep 4, 2020 1:48 PM in response to HernameisShouq

No problem, but you must resist the temptation to G**gle for a solution because the only search results you will receive are solicitations to download and install some magical thing claiming to cure all ills. They are designed for one and only one purpose: to take your money, regardless if they are "free" or not. Using them will only result in misery.


The first step is to go to the Finder. To do that click anywhere on your Mac's Desktop, then click the Go menu. You will see a Go to Folder... selection. Pick up the rest of my instructions from there. After you post those three screenshots I will have additional instructions.

Sep 4, 2020 6:34 PM in response to HernameisShouq

You deleted all the files / folders in the first three I mentioned before I was able to examine them, so it's no longer possible to correlate their names with those in ~/Library/Application Support. It's of no consequence though because if they no longer exist as Launch Agents or Launch Daemons, then their processes won't exist either, and their counterparts in Application Support will remain inert.


Where did you find that file in the last screenshot?

Sep 4, 2020 5:38 PM in response to John Galt

I did everything you've said, when I opened the safe mode the window didn't show up, then I did a backup and followed every instruction you gave me, and I didn't find anything odd , then I did a restart and that save mode turned off, the window showed up again then I pressed show in finder and the window disappeared and didn't show up again. However, when i searched for ~/Library/Application Support I did find a lot of folders and I didn't recognize half of them, but this one is the strangest file I find, should I delete it or not?





Sep 5, 2020 7:32 PM in response to John Galt

I'm sorry but yesterday I shut down my MacBook and everything was fine, when I opened it today the "will damage your computer" window showed up again but when I press "show in Finder" the window disappears and never show up again unless I restart or shut down then reopen my MacBook , does it take time to disappear completely or is the problem still didn't solved yet?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

HELP my MacBook Air have a "will damage your computer" message

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.