Malwared

Just checked my M1 Mac Mini running Monterey 12.4 " like yours" and the " amsaccountsd " process does not appear to be a Native Apple Process

There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX  Foundation and Permission Limitation. 

The The Built in Security  is all that is required to protect the computer.

Should “ Certain & Specific Software “ referenced from above be installed - it will negatively impact macOS. It is suggested, to download directly from a respected ASC Contributor, the application Malwarebytes for Mac. 

It is free or paid for added features. 

Run the Application and it should remove the malware / adware. Once done, restart computer and test.

Looked at the Etrecheck Report but it looks to incomplete.

It is missing all the Recent Installation in past 60 Days

Copy of my Report below

Software Installs (past 60 days):

    Install Date Name (Version)

    2022-04-30 MRTConfigData (1.93)

    2022-05-17 Ad And Stuff Blocker (5.3.0)

    2022-05-18 RosettaUpdateAuto (1.0.0.0.1.1652134194)

    2022-05-18 macOS 12.4 (12.4)

    2022-05-20 iMovie (10.3.3)

    2022-06-01 WiFi Explorer (3.3.6)

    2022-06-10 XProtectPlistConfigData (2160)

It's not malware. It appears to be part of the system. This Apple document describes its purpose: What is “accountsd” and what does it have to do with the Mail app on macOS Catalina?

This is from that document:

What is “accountsd”?

Every time that you log into an account from your Mac, you are using the Accounts Framework. This gives the system access to any of the user accounts that are stored in the system. Additionally, the integration with the Framework makes it so that your username and passwords are stored, without the need for using another app or service. More commonly, this is known as iCloud Keychain.

I also have the same file on my Monterey and Ventura drives.

FWIW, amsaccountsd seems to be a normal daemon, part of the OS, so nothing to worry.

Why was it a concern in the first place is what I would like to know.

Interesting that you’re seemingly concerned about malware (which you don’t appear have, per that report), and seemingly unconcerned about backups (which you also don’t have, per report).

This absent some other third-party backup tools; tools not showing in the report.

If you’re concerned about data security and integrity, and about recovery from malware, backups and preferably deep and scheduled and variously disconnected backups are a key and central part of that recovery.

In other not-news, the read and write speeds on the new Macs are wicked fast.

P. Phillips wrote:

Looked at the Etrecheck Report but it looks to incomplete.

It is missing all the Recent Installation in past 60 Days

This may be my fault. The recent installations section is one that will not appear if there isn't any data. Considering how pristine this report it, it could very well be a new, fresh-out-of-the-box system that hasn't had anything installed yet.

But regardless, it caused confusion, so I'll change it. I'll have a new update out in July with initial support for [redacted]. This will be easy to fix.

Finding out if any given name like "amsaccountsd" is actually an Apple process or not can be difficult. Typos aside, if it doesn't show up in Activity Monitor, it could still be valid. Not all Apple tasks are running all of the time. You would think that with over 700 processes running at any given time, Apple wouldn't have anything else left to run, but you'd be wrong. There are at least 350 additional launchd tasks that aren't actually running. I'm sure there are a few hundred other tools that are scattered in dozens of different locations that could be run at any time for any other reasons.

Thanks for the heads up on this one. Interesting if you follow the OP subscription history, you will see the OP posted later the same day with possible the same or different Etrecheck report. When have will inspect that report to compare, only out of personal interest

Thanks again and looking forwards to collaborations in the future

P. Phillips wrote:

https://discussions.apple.com/content/attachment/5f53af03-5b0c-4f49-8148-da1d9575ff0f

No seeing with search "ans "

There is a typo: it is ams, not ans

No seeing with search "ans "

The report is squeaky clean.

Where are you seeing that information about amsaccountsd?

Refer to above regarding missing elements of the Etrecheck Report - make the job a bit more difficult to spot the malware ? If it exists ?

Ah and taking things verbatim and as accurate.

Mind reading is not a strong suite.

Followup - it appears the Duplicate was removed by the Moderator