found something suspicious in my doc's

... need someone to bounce them off of to reassure myself that i'm not gonna hear. " oh that's normal". AGAIN!! it looks like someone loaded my O.S. remotely.

May 13 11:15:04 Edwards-iMac installd[393]: PackageKit: Executing script "./postinstall" in /private/tmp/PKInstallSandbox.Xz1uz2/Scripts/org.clover.efifolder.GbAJWt

May 13 11:15:04 Edwards-iMac installd[393]: ./postinstall: ===============================================

May 13 11:15:04 Edwards-iMac installd[393]: ./postinstall: EFIFolder Post-Install Script

May 13 11:15:04 Edwards-iMac installd[393]: ./postinstall:

MacBook Pro 15”, macOS 10.15

Posted on Oct 3, 2020 12:17 PM

Similar questions

2 replies

Oct 4, 2020 1:47 AM in response to red665

https://insmac.org/macosx/3526-clover-efi-bootloader.html

Ring any bells?

As for it being normal? No I don't think so as this is not something that comes as standard on any Mac hardware or is part of macOS. I think you (or someone else you've given access to your Mac) has been experimenting/fiddling, in the past or recently and either given up or continued with it and have simply forgotten.

This forum is for Apple Remote Desktop, an entirely different product unrelated to what you have and your question. I've asked the moderator to move your post to a more appropriate forum where you're more likely to get more answers.

red665 Author

Level 1

8 points

Oct 6, 2020 3:28 AM in response to Antonio Rocco

At closer review I realized it was me... not who (hacker) person that has been remotely attacking me for the past 9 months 3 cell phones, two laptops and 2 tv's later and he's still coming at me.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

found something suspicious in my doc's