macOS Monterey 12.4 automator stub unsigned

I have two apps in my system report that have no source (unsigned?). Any chance this is malware? Recent data usage spike has me concerned.


Automator Application Stub:



  Version: 1.3


  Obtained from: Unknown


  Last Modified: 5/9/22, 2:30 PM


  Kind: Universal


  Location: /System/Library/CoreServices/Automator Application Stub.app



com.apple.ctcategories:




  Obtained from: Unknown


  Last Modified: 6/23/22, 7:22 AM


  Kind: Other


  Location: /Users/cvm/Library/HTTPStorages/com.apple.ctcategories.service

MacBook Air 13″, macOS 12.4

Posted on Jun 23, 2022 7:42 AM

Reply

Similar questions

1 reply

Jun 23, 2022 11:03 AM in response to JCM.MARKETING

JCM.MARKETING wrote:

I have two apps in my system report that have no source (unsigned?). Any chance this is malware?

Recent data usage spike has me concerned.
|
Automator Application Stub:
Location: /System/Library/CoreServices/Automator Application Stub.app



No this is not malware there is no reason for concern.

/System files are wll protected by the macOS—you have no r/w permission here. This goes back to macOS Catalina


Big Sur/Monterey since it loads the System from a locked Macintosh HD...


Big Sur/Monterey use this snapshot of the current system for its SSV (Signed System Volume ) w/ strong cryptographic protections to store system content .


ref: About the read-only system volume in macOS Catalina - Apple ...

About the read-only system volume in macOS Catalina - Apple Support



Data usage you can see from Your Activity Monitor.app>Network

Activity Monitor User Guide for Mac - Apple Support



If you suspect you have installed adware/malware:


>System Preferences>Profiles click into it and then remove all the suspicious things from the list. (This Preference pane will not be present if no profiles found.)


also Verify you are not using SOCKS proxy:

>System Preferences>Networks>Advanced>Proxy uncheck the box


Adware/malware launch daemons can set SOCKS proxies without user participation.

(SOCKS is an Internet protocol that exchanges network packets between a client and server through a proxy server.)


Adware Removal Guide—Manual removal of : http://www.thesafemac.com/arg-identification/

or

Try running this trusted utility https://www.malwarebytes.com/mac/



Effective defenses against malware and other threats… - Apple Community

Effective defenses against malware and ot… - Apple Community





Apple’s own built in security:


macOS - Security - Apple macOS - Security - Apple

Apple Platform Security - Apple Apple Platform Security - Apple Support


Protecting against malware in macOS - Apple Support






This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

macOS Monterey 12.4 automator stub unsigned

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.