Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

An app wants access to control “Safari”

I am repeatedly

receiving this from my Apple Mac Mini


“9527369705551797094” wants access to control “Safari”. Allowing control will provide access to documents and data in “Safari”, and to perform actions within that app.




[Re-Titled by Moderator]

Posted on Jan 22, 2021 6:45 AM

Reply
Question marked as Best reply

Posted on Jan 22, 2021 7:11 AM

It sounds like you have downloaded or installed some kind of third party Anti-Virus, Cleaning or perhaps even some Spam-ware that wants access.


Such thing like Anti-Virus and Cleaning ware are not necessary or recommended for macOS and can actually do more harm than good.


To sort out what it is, please download and run EtreCheck on your Mac and post back here with the EtreCheck Report.

https://apps.apple.com/us/app/etrecheck/id1423715984?mt=12

https://etrecheck.com


If it turns out to be Spam-ware, then run the free version of MalwareBytes to see if it can find the culprit.

https://www.malwarebytes.com/mac/

32 replies
Question marked as Best reply

Jan 22, 2021 7:11 AM in response to DATA FERRET

It sounds like you have downloaded or installed some kind of third party Anti-Virus, Cleaning or perhaps even some Spam-ware that wants access.


Such thing like Anti-Virus and Cleaning ware are not necessary or recommended for macOS and can actually do more harm than good.


To sort out what it is, please download and run EtreCheck on your Mac and post back here with the EtreCheck Report.

https://apps.apple.com/us/app/etrecheck/id1423715984?mt=12

https://etrecheck.com


If it turns out to be Spam-ware, then run the free version of MalwareBytes to see if it can find the culprit.

https://www.malwarebytes.com/mac/

Apr 24, 2021 3:44 AM in response to SeabirdNguyen

Launchd: /Library/LaunchDaemons/net.12322000620232807038.E9F6F8AC-530F-4C9F-AC17-27CEAF12CB78.plist

Executable: /Library/Application Support/com.16806718884337713624._16806718884337713624/_247650931929641382

Details: Domain name invalid - possibly adware



This appears to be it.


In the Finder, press Command-Shift-G and paste the following:


/Library/LaunchDaemons/net.12322000620232807038.E9F6F8AC-530F-4C9F-AC17-27CEAF12CB78.plist


drag the file to the trash.


Repeat the process with


/Library/Application Support/com.16806718884337713624._16806718884337713624/_247650931929641382


Enter your password if requested. Empty the trash and restart.

Mar 12, 2021 10:05 AM in response to den.thed

I downloaded and ran the free version of etrecheck as suggested above and it identified my problem as an unsigned file and, with my permission, deleted it. Problem solved - for now, but my husband had a similar occurrence on his computer a week ago, so this may be a reoccurring problem going forward. The file that was identified as causing the problem had been loaded to my computer on 3-4-2021 but I can't recall doing so. Thank you for providing this suggestion of help.


May 19, 2021 8:56 AM in response to DATA FERRET

These are not my instructions** But they did work for me!!


It sounds like you have downloaded or installed some kind of third party Anti-Virus, Cleaning or perhaps even some Spam-ware that wants access.


Such thing like Anti-Virus and Cleaning ware are not necessary or recommended for macOS and can actually do more harm than good.


To sort out what it is, please download and run EtreCheck on your Mac and post back here with the EtreCheck Report.

https://apps.apple.com/us/app/etrecheck/id1423715984?mt=12

https://etrecheck.com


If it turns out to be Spam-ware, then run the free version of MalwareBytes to see if it can find the culprit.

https://www.malwarebytes.com/mac/

Apr 13, 2021 5:03 AM in response to DATA FERRET

I'm so desperate cause for the first time in my life I have a virus and I did almost everything to get rid of it

I even put my Big Sur down, now I have too many Macintosh HD's. Under > monitoring I checked the X for = stop running that particular number

Now that **** virus sneaked into >> Security&Privacy > Automation (and I cannot delete it😡

I immediately unchecked Safari again, worst I cannot even open my FileVault, and I know I have the right access code because I took a picture.

I am adding a snapshot please will somebody tell me how I get rid of it or if I have to put my Big Sur down again, if I have to is there any link for particular Big Sur and not somebody using Catalina and telling your picture look slight different, that's all blah blah ... Big Sur doesn't even shut down like all the others


Thank you and God Bless for anybody who can tell me


Y?☺️




Mar 22, 2021 9:11 AM in response to ChelsMisG28

The report says exactly where the file is:


Launchd: ~/Library/LaunchAgents/com.18110 ...

Executable: ~/Library/Application Support/com.130785374 .....

Details: Domain name invalid - possibly adware


You can delete these two using the Finder:


Press command-shift-G and paste


~/Library/LaunchAgents


Drag com.18110... to the trash


Repeat with


~/Library/Application Support/


and drag the folder com.130... to the trash

Restart.

Apr 16, 2021 9:37 AM in response to Luis Sequeira1

Was not able to download ether....... But I had purchased Malwarebytes recently. I opened this app, and gave it "Full Disk Access". It found 6 threats, and immediately quarantined them. Problem solved.


I do not endorse, or recommend this or any other particular product. Just wanted to help out. In this instance, it worked very well. The Pop-Up asking for permission was VERY annoying, and I need to use Safari as my browser, so permanently switching to Chrome was not a real option for me.


Good luck.

Apr 29, 2021 6:14 AM in response to flaviaearth

These are applications that are not digitally signed.

The icon is the default icon one gets if you just put together an application in XCode.

Were you experimenting with XCode to make a mac app?


You can click the "Show in Finder" button and see where these applications are stored.

Most likely they are just sitting there, harmlessly, but you can simply drag them to the trash.

Jun 2, 2021 6:51 AM in response to ushafromnewyork

See this:


Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.AssistiveFile.service.plist

Executable: ~/Library/Application Support/.9780954742548601157/Services/com.AssistiveFile.service/AssistiveFile.service -s 6600

Details: Executable file is hidden - possibly adware


Launchd: ~/Library/LaunchAgents/com.8250209770112325633.plist

Executable: ~/Library/Application Support/com.11872998749304589997/4027668095275677985 B1B434FF-FE49-5C7B-B5A8-4852428F32B0 1137

Details: Domain name invalid - possibly adware


Launchd: /Library/LaunchDaemons/com.10994683933603671667.64883274E90135B81FD5BCCD37F4C259632DC6AC348666D473E57980A055AABD.plist

Executable: /Library/Application Support/com.12592798363995974996/10382090412824701380 '/Library/Application Support/com.12592798363995974996/16117774811751782018' pjlhfnpcdklhijpmdmahnhmldlbegbmn 'Profile 1,Profile 2,Default' '/Library/Application Support/com.12592798363995974996/14896926111128528095' B1B434FF-FE49-5C7B-B5A8-4852428F32B0

Details: Domain name invalid - possibly adware


Launchd: /Library/LaunchDaemons/com.AssistiveFile.system.plist

Executable: /Library/Application Support/.9780954742548601157/System/com.AssistiveFile.system/AssistiveFile.system -t com.AssistiveFile.system

Details: Executable file is hidden - possibly adware


You can run Etrecheck again and follow the instructions to remove the adware.

If that does not work, we can give instructions for removing these files manually.

An app wants access to control “Safari”

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.