You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
Hello.
I have this problem when I start my computer.
I haven't installed Clean My Mac, Adguard and other crap.
I only use the OnyX application for eventual maintenance.
The strangest thing is that in the other user I have on this same computer, this message does not appear, being the two Administrators.
Any suggestion ?
iMac 27″, macOS 12.4
Thank you for being proactive and going that extra step and suppling the EtreCheck Report.
This computer is running several Security and Antivirus Applications all at the same time
The Important elements of the builtin Security and Updates parts of the Native Apple Operating System are Turned Off leaving the computer compromised.
It is also heavily Modified Operations System
Below are the Key Aspects from the Report and with some suggestions to possible remedy this situation.
Though, to be forwards about this - One may or may not consider stating with a Clean Slate as in Recovery Mode and remove all data and do a Clean and Virginal Installation. This would wipe out the existing issue of where there are many.
If considering this open - do not suggest Migrating anything from a TM Backup except the User Account. Otherwise - one will be reintroducing the Already Existing issue back into a Virginal Installation
Major Issues:
Q - Gatekeeper disabled - Gatekeeper security protection is disabled. This computer is at risk of malware infection.
A - Unless there is a specific reason not to enable this - the computer would be better served by Enabling
Q - Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection.
A - Unless there is a specific reason not to enable this - the computer would be better served by Enabling
Minor Issues:
These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
Q - Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
Q - Old Applications: 227 x86-only apps
A - Self explanatory and the User ( you )will need to evaluate each Application for more current and updated version or replacements
Q - System modifications - There are a large number of system modifications running in the background.
A - Any time an Operating system is so heavily Modified - this places the system in a compromised state with sometime unintended consequences like that which is happen now on the computer
Q - Runaway user process - A user process is using a large percentage of your CPU.
A - This dovetails into and may be directly related to earlier issue on Unsigned files
Q - Kernel extensions present - This computer has kernel extensions that may not work in the future.
A - Refer to later area below regarding " System Extensions "
Hardware Information:
iMac (Retina 5K, 27-inch, 2020)
System Software:
macOS Monterey 12.4 (21F79)
Q - Antivirus software: ESET
A - There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX Foundation and Permission Limitation.
The Only thing this Antivirus software is protecting is the Bank Account of the Developers and for zero return to the User aside from the problems this software creates.
Any of the below should be removed as per Developers Instructions
ESET and please take a moment to read what this application can and does do.
The The Built in Security is all that is required.
System Extensions:
Q - [Running] ESET Firewall - version 6.11.100 (ESET, spol. s r.o. - 2022-03-16)
A - Already covered this in above
Q - Application: /Applications/ESET Cyber Security Pro.app - version 6.11.100 (ESET, spol. s r.o. - 2022-03-16)
A - Already covered this in above
Kernel Extensions:
/Applications/ESET Cyber Security Pro.app
A - Already covered this in above on ESET
Q - [Running] Kaspersky Secure Connection Login Item (App Store - installed 2022-05-26)
A - Search - Apple Community https://discussions.apple.com/search?q=%20Acronis%20Cyber%20Protect%20Connect%20Agent&page=1&content=filterDiscussions
Software Installs (past 60 days): Install Date Name (Version)
Q - 2022-05-03 Acronis Cyber Protect Connect Agent (1.0.0)
Thank you for being proactive and going that extra step and suppling the EtreCheck Report.
This computer is running several Security and Antivirus Applications all at the same time
The Important elements of the builtin Security and Updates parts of the Native Apple Operating System are Turned Off leaving the computer compromised.
It is also heavily Modified Operations System
Below are the Key Aspects from the Report and with some suggestions to possible remedy this situation.
Though, to be forwards about this - One may or may not consider stating with a Clean Slate as in Recovery Mode and remove all data and do a Clean and Virginal Installation. This would wipe out the existing issue of where there are many.
If considering this open - do not suggest Migrating anything from a TM Backup except the User Account. Otherwise - one will be reintroducing the Already Existing issue back into a Virginal Installation
Major Issues:
Q - Gatekeeper disabled - Gatekeeper security protection is disabled. This computer is at risk of malware infection.
A - Unless there is a specific reason not to enable this - the computer would be better served by Enabling
Q - Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection.
A - Unless there is a specific reason not to enable this - the computer would be better served by Enabling
Minor Issues:
These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
Q - Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
Q - Old Applications: 227 x86-only apps
A - Self explanatory and the User ( you )will need to evaluate each Application for more current and updated version or replacements
Q - System modifications - There are a large number of system modifications running in the background.
A - Any time an Operating system is so heavily Modified - this places the system in a compromised state with sometime unintended consequences like that which is happen now on the computer
Q - Runaway user process - A user process is using a large percentage of your CPU.
A - This dovetails into and may be directly related to earlier issue on Unsigned files
Q - Kernel extensions present - This computer has kernel extensions that may not work in the future.
A - Refer to later area below regarding " System Extensions "
Hardware Information:
iMac (Retina 5K, 27-inch, 2020)
System Software:
macOS Monterey 12.4 (21F79)
Q - Antivirus software: ESET
A - There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX Foundation and Permission Limitation.
The Only thing this Antivirus software is protecting is the Bank Account of the Developers and for zero return to the User aside from the problems this software creates.
Any of the below should be removed as per Developers Instructions
ESET and please take a moment to read what this application can and does do.
The The Built in Security is all that is required.
System Extensions:
Q - [Running] ESET Firewall - version 6.11.100 (ESET, spol. s r.o. - 2022-03-16)
A - Already covered this in above
Q - Application: /Applications/ESET Cyber Security Pro.app - version 6.11.100 (ESET, spol. s r.o. - 2022-03-16)
A - Already covered this in above
Kernel Extensions:
/Applications/ESET Cyber Security Pro.app
A - Already covered this in above on ESET
Q - [Running] Kaspersky Secure Connection Login Item (App Store - installed 2022-05-26)
A - Search - Apple Community https://discussions.apple.com/search?q=%20Acronis%20Cyber%20Protect%20Connect%20Agent&page=1&content=filterDiscussions
Software Installs (past 60 days): Install Date Name (Version)
Q - 2022-05-03 Acronis Cyber Protect Connect Agent (1.0.0)
There is no reason to ever install or run any 3rd party "cleaning", "optimizing", "speed-up", anti-virus, VPN or security apps on your Mac. This user tip describes what you need to know and do in order to protect your Mac: Effective defenses against malware and other threats - Apple Community.
There are no known viruses, i.e. self propagating, for Macs. There are, however, adware and malware which require the user to install although unwittingly most of the time thru sneaky links, etc.
Anti Virus developers try to group all types as viruses into their ad campaigns of fear. They do a poor job of the detecting and isolating the adware and malware. Since there are no viruses these apps use up a lot of system resources searching for what is non-existent and adversely affect system and app performance.
There is one app, Malwarebytes, which was developed by a long time contributor to these forums and a highly respected member of the computer security community, that is desshoigned solely to seek out adware and known malware and remove it. The free version is more than adequate for most users.
Also, unless you're using a true VPN tunnel, such as between you and your employer, school or bank's servers, they are useless from a privacy standpoint. Read these two articles: Public VPN's are anything but private and Former Malware Distributor Kape Technologies Now Owns ExpressVPN, CyberGhost, Private Internet Access, Zenmate, and a Collection of VPN “Review” Websites.
You are welcome.
Do come back to the Apple Support Communities ( ASC ) in the future, if / or when additional questions may arise
There has been sufficient advise / suggestions offered, from more than One Contributor, is for the User ( you ) to make an informed and educated choice what the next course of action is required.
Further, the underling issues, presented from the Etrecheck Report, remain.
This like painting over a hole in the wall but the hole is there and will surface again at sometime.
The suggestions have been put forth on a volunteer basis, in good faith and in the best interests of the computer.
Miraculously, the problem went away once I booted into safe mode and disabled some apps at system startup.
I reactivated the applications again at system startup, and without any logical explanation, the problem was solved because the message disappeared at first.
About your analysis, some considerations, namely:
ESET Cyber Security Pro.app - It is a malware protection antivirus.
Kaspersky Secure Connection - It is a public VPN used to bypass blocking websites.
2022-05-03 Acronis Cyber Protect Connect Agent (1.0.0) - Application that I bought, to manage remote computers through this agent, and to connect by cell phone on my iMac.
Runaway user process - I was scanning for viruses at the time of EtherCheck logging, and this may have increased CPU load.
Old Applications: 227 x86-only apps - The apps you mentioned are all up to date. If the manufacturer does not release new versions, that is not my responsibility, but all applications on this computer are fully usable.
Gatekeeper and System Integrity Protection disabled - Unfortunately I still use some apps from unverified sources like Winbox (to manage Mikrotiks) among others, which cannot be obtained from the AppStore.
Similar question but in High Sierra macOS 10.13 with possible solution provided by @ VikingOSX
There is no application set to open the U… - Apple Community
I saw in another thread that was asked as a suggestion to find the culprit, the use of EtreCheck. Here below is the complete report because I don't know how to interpret it.
Sorry about my English.
The attempts he went through, I've already tried.
Remove applications that start with MAC and scan with Anti malware.
Thanks for the brother.
ksec has to do with keychain access. The error reported may or may not be malicious or a bug. Keychain is what you need to troubleshoot, eg. what app is calling for keychain login?
There is no application set to open the URL ksec://openFromLoginItem
