An app wants access to control “Safari”

I am repeatedly

receiving this from my Apple Mac Mini


“9527369705551797094” wants access to control “Safari”. Allowing control will provide access to documents and data in “Safari”, and to perform actions within that app.




[Re-Titled by Moderator]

Posted on Jan 22, 2021 6:45 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 22, 2021 7:11 AM

It sounds like you have downloaded or installed some kind of third party Anti-Virus, Cleaning or perhaps even some Spam-ware that wants access.


Such thing like Anti-Virus and Cleaning ware are not necessary or recommended for macOS and can actually do more harm than good.


To sort out what it is, please download and run EtreCheck on your Mac and post back here with the EtreCheck Report.

https://apps.apple.com/us/app/etrecheck/id1423715984?mt=12

https://etrecheck.com


If it turns out to be Spam-ware, then run the free version of MalwareBytes to see if it can find the culprit.

https://www.malwarebytes.com/mac/

32 replies
Question marked as Top-ranking reply

Jan 22, 2021 7:11 AM in response to DATA FERRET

It sounds like you have downloaded or installed some kind of third party Anti-Virus, Cleaning or perhaps even some Spam-ware that wants access.


Such thing like Anti-Virus and Cleaning ware are not necessary or recommended for macOS and can actually do more harm than good.


To sort out what it is, please download and run EtreCheck on your Mac and post back here with the EtreCheck Report.

https://apps.apple.com/us/app/etrecheck/id1423715984?mt=12

https://etrecheck.com


If it turns out to be Spam-ware, then run the free version of MalwareBytes to see if it can find the culprit.

https://www.malwarebytes.com/mac/

Mar 12, 2021 10:05 AM in response to den.thed

I downloaded and ran the free version of etrecheck as suggested above and it identified my problem as an unsigned file and, with my permission, deleted it. Problem solved - for now, but my husband had a similar occurrence on his computer a week ago, so this may be a reoccurring problem going forward. The file that was identified as causing the problem had been loaded to my computer on 3-4-2021 but I can't recall doing so. Thank you for providing this suggestion of help.


Apr 24, 2021 3:44 AM in response to SeabirdNguyen

Launchd: /Library/LaunchDaemons/net.12322000620232807038.E9F6F8AC-530F-4C9F-AC17-27CEAF12CB78.plist

Executable: /Library/Application Support/com.16806718884337713624._16806718884337713624/_247650931929641382

Details: Domain name invalid - possibly adware



This appears to be it.


In the Finder, press Command-Shift-G and paste the following:


/Library/LaunchDaemons/net.12322000620232807038.E9F6F8AC-530F-4C9F-AC17-27CEAF12CB78.plist


drag the file to the trash.


Repeat the process with


/Library/Application Support/com.16806718884337713624._16806718884337713624/_247650931929641382


Enter your password if requested. Empty the trash and restart.

Mar 22, 2021 9:11 AM in response to ChelsMisG28

The report says exactly where the file is:


Launchd: ~/Library/LaunchAgents/com.18110 ...

Executable: ~/Library/Application Support/com.130785374 .....

Details: Domain name invalid - possibly adware


You can delete these two using the Finder:


Press command-shift-G and paste


~/Library/LaunchAgents


Drag com.18110... to the trash


Repeat with


~/Library/Application Support/


and drag the folder com.130... to the trash

Restart.

Apr 29, 2021 6:14 AM in response to flaviaearth

These are applications that are not digitally signed.

The icon is the default icon one gets if you just put together an application in XCode.

Were you experimenting with XCode to make a mac app?


You can click the "Show in Finder" button and see where these applications are stored.

Most likely they are just sitting there, harmlessly, but you can simply drag them to the trash.

May 19, 2021 8:56 AM in response to DATA FERRET

These are not my instructions** But they did work for me!!


It sounds like you have downloaded or installed some kind of third party Anti-Virus, Cleaning or perhaps even some Spam-ware that wants access.


Such thing like Anti-Virus and Cleaning ware are not necessary or recommended for macOS and can actually do more harm than good.


To sort out what it is, please download and run EtreCheck on your Mac and post back here with the EtreCheck Report.

https://apps.apple.com/us/app/etrecheck/id1423715984?mt=12

https://etrecheck.com


If it turns out to be Spam-ware, then run the free version of MalwareBytes to see if it can find the culprit.

https://www.malwarebytes.com/mac/

Jun 2, 2021 6:51 AM in response to ushafromnewyork

See this:


Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.AssistiveFile.service.plist

Executable: ~/Library/Application Support/.9780954742548601157/Services/com.AssistiveFile.service/AssistiveFile.service -s 6600

Details: Executable file is hidden - possibly adware


Launchd: ~/Library/LaunchAgents/com.8250209770112325633.plist

Executable: ~/Library/Application Support/com.11872998749304589997/4027668095275677985 B1B434FF-FE49-5C7B-B5A8-4852428F32B0 1137

Details: Domain name invalid - possibly adware


Launchd: /Library/LaunchDaemons/com.10994683933603671667.64883274E90135B81FD5BCCD37F4C259632DC6AC348666D473E57980A055AABD.plist

Executable: /Library/Application Support/com.12592798363995974996/10382090412824701380 '/Library/Application Support/com.12592798363995974996/16117774811751782018' pjlhfnpcdklhijpmdmahnhmldlbegbmn 'Profile 1,Profile 2,Default' '/Library/Application Support/com.12592798363995974996/14896926111128528095' B1B434FF-FE49-5C7B-B5A8-4852428F32B0

Details: Domain name invalid - possibly adware


Launchd: /Library/LaunchDaemons/com.AssistiveFile.system.plist

Executable: /Library/Application Support/.9780954742548601157/System/com.AssistiveFile.system/AssistiveFile.system -t com.AssistiveFile.system

Details: Executable file is hidden - possibly adware


You can run Etrecheck again and follow the instructions to remove the adware.

If that does not work, we can give instructions for removing these files manually.

Jul 5, 2021 1:58 PM in response to kelseymoyra

You have adware. Run Etrecheck again and follow the instructions to remove; if Etrecheck can’t then get the free version of MalwareBytes to do it.


Also:


Proxies - Network proxies detected. This could be evidence of malware.


Usually there are no proxies; as the report says this is probably caused by the adware. Open System Preferences->Network, click Advanced, then click Proxies. Remove them, unless you are sure that you have legitimate reasons for them.

Apr 16, 2021 9:37 AM in response to Luis Sequeira1

Was not able to download ether....... But I had purchased Malwarebytes recently. I opened this app, and gave it "Full Disk Access". It found 6 threats, and immediately quarantined them. Problem solved.


I do not endorse, or recommend this or any other particular product. Just wanted to help out. In this instance, it worked very well. The Pop-Up asking for permission was VERY annoying, and I need to use Safari as my browser, so permanently switching to Chrome was not a real option for me.


Good luck.

Jun 9, 2021 1:07 AM in response to Luis Sequeira1

The report flags these as probably adware:



Launchd: ~/Library/LaunchAgents/com.OperativeDesktop.service.plist

Executable: ~/Library/Application Support/.17503686062684007428/Services/com.OperativeDesktop.service/OperativeDesktop.service -s 6600

Details: Executable file is hidden - possibly adware


Launchd: ~/Library/LaunchAgents/com.11019459635502539271.plist

Executable: ~/Library/Application Support/com.3659435294062101829/8449490341493876945 D96FEF1A-A33F-5E60-886B-4AC7FD275DF2 1137

Details: Domain name invalid - possibly adware


Launchd: /Library/LaunchDaemons/com.OperativeDesktop.system.plist

Executable: /Library/Application Support/.17503686062684007428/System/com.OperativeDesktop.system/OperativeDesktop.system -t com.OperativeDesktop.system

Details: Executable file is hidden - possibly adware



You can use the free version of MalwareBytes to remove it, or you can do it manually.


1) In Finder press Command-Shift-period to make Finder show 'hidden files'. (as noted above, some of these files are hidden and you would not find them otherwise).


2) In Finder, press Command-Shift-G and paste the following line:


~/Library/LaunchAgents/com.OperativeDesktop.service.plist


then drag the file to the trash. Repeat for each of the following lines (each is a single, long line):



~/Library/Application Support/.17503686062684007428/Services/com.OperativeDesktop.service/OperativeDesktop.service -s 6600


~/Library/LaunchAgents/com.11019459635502539271.plist


/Library/Application Support/.17503686062684007428/System/com.OperativeDesktop.system/OperativeDesktop.system -t com.OperativeDesktop.system


Then restart your mac, and see how it goes. You may also run Etrecheck again to see if some part of those remain.


You can press command-shift-period again to stop showing hidden files.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

An app wants access to control “Safari”

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.