You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

“HPDeviceMonitoring.framework” will damage your computer.

i can't get rid of this pop up message can anyone help me please

iMac 21.5″, macOS 10.15

Posted on Oct 23, 2020 2:26 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 23, 2020 3:05 AM

Hello Lindenbaum,


I've just got rid of it by:

  1. Using Finder to go to "Library/LaunchAgents" and moving the most recently added and suspicious looking file to the bin.
  2. Did the same here "Library/LaunchDemons"
  3. And here "~Library/LaunchAgents"
  4. I also went to "Applications" and sorted by most recently added to see if anything suspicious has been added, and removed that.
  5. Then I restarted my Mac and it's fixed!


Good luck!

364 replies

Oct 23, 2020 8:50 AM in response to Rolaa

hi, 1 plist file in LaunchAgents folder that was causing the popup for me, when I looked at the plist file properties, it was created on 22nd oct, deleted plist file and restarted Mac, no popup. thanks again for all your help. if this didn't work, would have taken drastic steps, a full factory reset.


do you know if It was malware? strange how everyone got it at the same time with different creation dates etc. I'm off to complain to malwarebytes, I'm paying £29.99 a year for malwarebytes for Mac(premium) with latest updates installed, ran a full system scan 5 times and got all clear for all of them


thanks again

Oct 23, 2020 8:52 AM in response to Lindenbaum

I have this post popping up too now. It is making my Finder unusable as it comes up every 20 seconds. Initially, I clicked on "Show in Finder". I deleted the folder it took me to. Then I rebooted and can't print. So I put the file back in what I believe is the right place. I tried the steps above and deleted a couple of entries from LaunchAgents that were recent. I am not sure what a "suspicious" file looks like. I ran LaunchDaemons and deleted the most recent file. When I searched on ~Library/LaunchAgents it said no file found. I also deleted the most recent application (all dated the same day which was associated with google). Restarted. I also got a pop up in the last couple of days telling me to update my Adobe Flash and that it will be expiring soon and I stupidly updated on faith. Its not fixed and I can't print. Using Catalina 10.15.7 on MacBook Pro mid 2015. Not sure what else to do. Also to compound the problem, my 2 year extended warranty on the printer expired this week too. I am not sure that it is a co-incidence.


Please help me.

Oct 23, 2020 8:54 AM in response to Lindenbaum

After over a year with having two HP printers in use, this morning, 10/23/2020 after startup of my Mac, I started getting this same pop-up. In searching for a cause, I saw where to look in the ~/Library/LaunchAgents folder and indeed this file was put there yesterday, 10/22/2020, at 10:00 AM: com.hp.devicemonitor.plist

I deleted this file from the ~/Library/LaunchAgents folder, which resolved the pop-up box from coming up, however now my HP Envy 7640 printer will not work. Our other HP printer does continue to work.

Hoping Apple will come up with suggestions on this.


Oct 23, 2020 9:27 AM in response to REW1027

To be more clear, this is how I got rid of the pop-up box, however, it didn't resolve my ability to print to my HP Envy 7640 printer. But I can still print to my HP Officejet Pro 9025.


Open Finder, click "Go" from the top menu bar, click "Go to Folder" and enter these respectively in the search box:

~/Library/LaunchAgents

Look for file com.hp.devicemonitor.plist


Open Finder, click "Go" from the top menu bar, click "Go to Folder" and enter these respectively in the search box:

/Library/LaunchAgents

Look for file com.hp.devicemonitor.plist


Open Finder, click "Go" from the top menu bar, click "Go to Folder" and enter these respectively in the search box:

/Library/LaunchDaemons

Look for file com.hp.devicemonitor.plist


Wherever this file exists, you might try deleting from the location found to see if it gets rid of the annoying popup box. It did for me, but again, I cannot print to the HP Envy 7640.


Oct 23, 2020 9:51 AM in response to Lindenbaum

I had the same problem this morning. Following Rolaa's advice about looking in the "Library/LaunchAgents" file, I located the file entitled "com.hp.devicemonitor.plist". I don't believe the file is malware but rather there's an osx incompatibility problem at the moment that hopefully Apple will fix soon. My husband suggested I rename the file to prevent it's launch on start up. I've temporarily appended it to "com.hp.devicemonitor.plist.old". Once "plist" is not longer seen as the extension it doesn't launch. Once the incompatibility problem is resolved I can restore the original file name. I then restarted my Mac and I'm no longer getting the popup message.

Oct 23, 2020 10:24 AM in response to Rolaa

I tried these steps. The last thing I did before the message was 1) update Microsoft apps and 2) shut down and then start my computer.

The 2 new files in the Library/Launch etc folders were both microsoft update files. I put them in the trash, restarted, and still get the same HPDeviceMonitoring.framework message.

Oct 23, 2020 11:27 AM in response to Lindenbaum

Hello,


This morning about 11:00am PST I clicked on an email - Hire Right (HireRight is a company which performs background checks when you are newly hired). Once I clicked on the LogIn button on the email, this was when the message begin to pop-up - "HPDeviceMonitoring.framework" will damage your computer.

I when through the steps to eliminate the items in the Finder App. I restarted my computer, to no avail, the message continues to pop up after I click OK on this Pop-up!!

What do I do?

I recently backed up my computer, although I don't remember where to go on my computer to access my recent back-up.

What are your thoughts about this to remove this annoying pop-up?


Oct 23, 2020 12:14 PM in response to likegadgets2

likegadgets2 wrote:

Here is an explanation:

https://eclecticlight.co/2020/10/19/apple-has-pushed-updates-to-xprotect-and-mrt-17/


Nope, that's not it. I've already tested samples of the affected software against the rules in the latest XProtect rules. There's some kind of strange code signing certificate issue, where there's a difference in the validity of the certificates on different versions of macOS.

“HPDeviceMonitoring.framework” will damage your computer.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.