Level 1

8 points

Unknown app asking for permissions

My wife's MacBook Air running Big Sur 11.6.8 has these two suspicious apps (?) showing up in the Automation window in Security and Privacy - SEE ATTACHED SCREENSHOTS. The second one that's just a string of numbers and letters occasionally launches a pop-up window asking for various permissions. I've deleted what I can identify (various plists and things with 'Artemis' in the title) using 'Go to Folder' and I've also run Etrecheck which picked up a couple more things to delete, but those two things are still showing in Automation after a restart. Are they buried in Terminal? How can we find and get rid of them? Thanks!

MacBook Air

Posted on Sep 28, 2022 10:09 AM

Top-ranking reply

Luis Sequeira1

Level 9

73,404 points

Posted on Sep 29, 2022 3:23 AM

This stuff is adware and it's a good thing that the OS is preventing it from controlling system events.

Do NOT allow.

Then run Etrecheck and post its report.

It is possible that Etrecheck itself can remove this and, if not, we can direct you but we need to see the report in order to give exact instructions.

View in context

Similar questions

20 replies

FlexibleHead Author

Level 1

8 points

Sep 29, 2022 4:04 AM in response to Owl-53

Claire's MacBook Etrecheck Report

Ha, thanks! And thank you very much for this. Report attached as requested (this is since I deleted all the stuff yesterday - MacBook as it currently stands).

Owl-53

Level 10

103,009 points

Sep 29, 2022 7:14 AM in response to FlexibleHead

EDITED Disregard Early posting

FlexibleHead Author

Level 1

8 points

Sep 29, 2022 7:51 AM in response to Owl-53

Thanks P, but I'm not sure what question you think you're answering.

FlexibleHead Author

Level 1

8 points

Sep 29, 2022 9:58 AM in response to Luis Sequeira1

Luis Sequeira1 wrote:

To answer directly, I don't know...

Well I get that you're all volunteers, so thanks anyway.

FlexibleHead Author

Level 1

8 points

Sep 30, 2022 2:14 AM in response to etresoft

etresoft wrote:

FlexibleHead wrote:

Could you possibly explain a bit more about the "tccutil" command in the Terminal? What exactly do I need to do there?

Run the following command:

tccutil reset AppleEvents

This will remove all entries from the Automation list

Boom! Fantastic, thank you so much - that worked perfectly. Problem solved. Can I make a donation to the Etresoft beer fund (or something)?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Unknown app asking for permissions