“HPDeviceMonitoring.framework” will damage your computer.

i can't get rid of this pop up message can anyone help me please

iMac 21.5″, macOS 10.15

Posted on Oct 23, 2020 2:26 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 23, 2020 2:25 PM

I solved this and the inability to print by following these steps exactly:




Go to 123.hp.com


Do NOT put in your printer type, instead use the "My device is not listed" link. This takes you to a more generalized tool to download.




Click the Download button. The application "HP Easy Start" version 2.9.3 will download.


Open this app... do NOT go beyond the first screen. Instead, look under the HP Easy Start menu next to the Apple menu, and select and choose "Uninstall HP Software..."




This launches the Uninstaller. Click Continue. Then it takes quite a while to remove all HP files.




When it's done, there is a button to relaunch HP Easy Start, called "Set Up New Device". Click that.




This time "Agree" and hit the Continue button. Make sure of the listed things on the next screen and click Continue.




Select your printer (mine is a printer on the network, it just shows up by its name, e.g. "Anubis") and click Continue.




Click "Install" in the next panel. The 'essential' software is downloaded, and permission must be given to proceed with installing.




Installation seems to take a long time. When it is done click Continue.




At this point you can set up Status and Alerts. I don't know what happens if you do, I just skipped that step by clicking Continue.




In the next panel, click "Add Device..." button. That doesn't take long. Then click "Print Test Page". 




If you are lucky like me that page prints. Click Continue. Next is to set up online access things. I didn't really want that, so when I clicked the "Continue Online..." button I did NOT click the "Register My Printer" button in the web page that opened. You might want to.




I confirmed that printing from an app actually works, and then restarting the computer did NOT result in the "damage" warning.


YAY.


Worked on a Catalina iMac and a Mohave MacBook Air.

364 replies

Oct 30, 2020 8:18 AM in response to Lindenbaum

I have resolved this issue for my combination of computer (iMac with macOS Version 10.15.7 Catalina) and printers (HP ENVY 4520 and an HP OfficeJet 4630). After uninstalling all HP files related to my printers, I turned off both of the printers. Then I went to SYSTEM PREFERENCES and opened the Printers and Scanners page. I moved the cursor into the window that displays the available printers and right clicked on that window. The option displayed is to Reset printing system. I clicked on that and all of the printers and scanners were deleted. I still saw the offending pop up message so I clicked on "Show in Finder" and deleted the files that were highlighted. Then I emptied the trash and restarted the computer. Once the computer had restarted, I downloaded the HP Smart App from HP's support page. Using that app I reinstalled both of my printers. (To add a printer click on the + sign at the upper right corner of the Home Page of the app.) Then I used the options presented on the Home page of the App (the little colored tiles) to print and scan and both worked. The previous series of steps that I used to print or scan are no longer what works but I can much more easily not print and scan from the HP Smart App. Also, I am no longer seeing the error message pop up "HPxxxxxx.framework will damage your computer. " I hope this helps any of you who< like me, have been struggling with this for the past week. 

Oct 23, 2020 10:12 AM in response to Lindenbaum

From preliminary investigation, this appears to be a false positive of some kind. A number of other printer drivers and some Amazon software (Amazon Music, Amazon Workspaces) are also affected. This is only happening on Catalina and (probably, though unconfirmed) Mojave. These do not appear to be malicious.


It's still uncertain exactly what is causing the problem, but please don't go ripping things out of your systems willy-nilly! Do not remove launch agents or daemons if you don't know what they are, as that can break legitimate software.


If you're affected, search for information on how to properly uninstall the software in question. For example, for HP software, look for an HP-provided uninstaller, or contact HP support for assistance with removing it. Be sure to use resources only on the HP website, such as support.hp.com, to avoid getting scammed. (Googling for "HP support" is likely to connect you with a scammer.) The same goes for Amazon, etc.


Hopefully, this situation will be resolved. We at Malwarebytes are still investigating and have been in communication with Apple, who is also investigating.

Oct 23, 2020 6:15 PM in response to Lindenbaum

I deleted each folder that popped up having a conflict. I had this problem too. It ask you to select OK, or Finder. Click finder it will open some folders. I deleted the HPdevicemontoring.framework folder, HPDM.framework folder and matterhorn.framework folder. Basically I deleted each folder that flashed up on my screen. This seem to do the job. Was able to print no problem. I have an HP 8600.

Oct 24, 2020 8:31 AM in response to Lindenbaum

I tried all these solutions to no avail. But then I did some more google search, and one source said it's an out-dated security certificate for an HP Printer. So I removed the old printer from my list (I hadn't had it for a few years anyway), and VOILA! That solved it.

It wasn't a virus. It wasn't adware. It was an old HP printer that I wasn't using that caused the problem.

Now to hope that some of the launch agent files I deleted weren't terribly important. ;)

Oct 25, 2020 3:36 AM in response to Javathinker

Just in case this has not been posted yet. The issue is not with your Mac, you are not at risk of malware, it’s a problem with a certificate that has been revoked or asked to be revoked between hop and Mac. This is not under our control apple and how need to sort it out the unofficial fix is to use AirPrint. Probably best. Or to start dismantling your drivers because of this just yet! https://www.theregister.com/AMP/2020/10/23/hp_printer_macos/

Nov 4, 2020 9:29 AM in response to texasnana

I have followed the suggestions from more than one source here (see a.o. message from RFQueiros), to download the latest HP driver 5.1 set and install it.

After that everything was fine: no more 'damage' messages.

Before that, I had followed tpmeyers' suggestion, which solved the printing problem (printing did go back to work) but still did generate one 'damage' message each time I wanted to print; I then hit OK, without deleting any software., and printing would start.

But now, after the HP package install, no more messages and all is OK.

I have a Macbook Pro 2017 with Catalina 10.15.7.

Nov 4, 2020 12:53 PM in response to Jbenicy

That's frustrating isn't it? Same functions were performed here and same Pop Ups that you experienced kept happening. Finally the HP Officejet Pro 8600 is printing and scanning via AirPrint and Bonjour. My solution is as follows:


The printer is no longer set up with a USB Cord. Within the System Preferences Panel I deleted all printers after reinstalling the downloadable HP printer software Then added the HP Officejet Pro 8600 as a new printer which had the Bonjour Setting and chose the AirPrint option. Printing and scanning has worked since November 2 via AirPrint. That being said. I usually like to have one printer that is hard wired, just in case the internet is down. During this process, I was notified that HP does not support USB or Ethernet cords for this printer any longer. Anyway, after much frustration, I'm just glad to be working again. Even if it is AirPrint. Hope this was helpful.

Nov 8, 2020 4:40 AM in response to texasnana

Hi texasnana, I understand very disconcerting. Had a similar incident last week , the files appeared to have fully downloaded but they weren’t.

If you still haven’t succeeded in solving the problem try what worked for me.

Find the “malware/falsepositive” files , “HPDeviceMonitoring.framework”etc.

Pathway is - HD>Library>Printers>hp>Frameworks

Quarantine them, that is copy them onto an external device or put in the bin. DON’T DELETE yet as you may want to return them to original position, although very unlikely.

Now try printing out something. For me that method worked, no printing problems.


I look after a few desktop and laptop computers and sometimes there are idiosyncrasies that require different solutions. So have a look over some of the other posts on this topic as well. For us, so far only 1 MacBook Pro running Catalina has thrown up the HP malware warning, its a mystery.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

“HPDeviceMonitoring.framework” will damage your computer.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.