What is Guroshield? I see it on my MacBook... in Notifications & Focus

It's adware / malware and it got on your Mac one of two ways.

1. You clicked on a website advertisement that tricked you into installing it.
2. You installed an application from a freeware / shareware site that bundled the malware with the App

Try using MalwareBytes to scan and remove the Adware / Malware:

https://www.malwarebytes.com/

I got hit with this tonight. Malwarebytes and Avast both didn't find anything.

My Etrecheck report showed these recent installs:

   2022-09-19 Chrome Remote Desktop Host

    2022-09-19 LINE (7.11.1)

I've used both Chrome Remote Desktop and LINE in the past, but I didn't update either of them today.

Checked my Applications folder and found LINE and Chrome Remote Desktop Uninstaller with Modified dates from earlier today. Clearly fraudulent Modified times on both. Deleted both LINE and Chrome Remote Desktop Uninstaller.

Found both LINE and Chrome Remote Desktop Host in my Chrome Extensions. They may have been legitimately installed by myself some long time ago, but since I've not used either in a long time, I chose to remove both extensions.

Finally, in Chrome I went to    chrome://settings/content/notifications and found a guroshied URL in the "Allowed to send notifications" section. Removed it.

No more notification popus. Not sure yet, whether my system is truly clean, though.

Please run another EtreCheck scan and post the report in a reply using the additional text button. But sounds like it was possibly a Chrome extension, i.e. browser hijack adware.

Install EtreCheck, run a scan and post the report. It will help us identify what to remove manually.

https://etrecheck.com/