Elementary Info Search alert will not delete
Mac OS Monterey 12.7 start up screen warning delete button is not accessible. Moving the warning to Trash results in the warning sliding under the Trash bucket.
iMac 24″, macOS 12.7
Apple Intelligence is now available on iPhone, iPad, and Mac!
📢 Newsroom Update
Apple unveils the new iMac with M4, supercharged by Apple Intelligence and available in fresh colors. Learn more >
Apple unveils the new iMac with M4, supercharged by Apple Intelligence and available in fresh colors. Learn more >
📢 Newsroom Update
Apple introduces M4 Pro and M4 Max. Learn more >
Apple introduces M4 Pro and M4 Max. Learn more >
Mac OS Monterey 12.7 start up screen warning delete button is not accessible. Moving the warning to Trash results in the warning sliding under the Trash bucket.
iMac 24″, macOS 12.7
Elementary Info Search
1. The Symantec instructions I linked are just a starting
point. You need to search their website for Mac-specific uninstallation
instructions.
The instructions I linked in my earlier reply should work.
They were updated recently.
"exe" files won't work, so I think you went off in
the wrong direction there.
2. Symantec Mac-specific uninstallation instructions.
3. Uninstall
Norton device security
no file found
4. Norton Ultimate Help Desk
Remove
all Norton programs for Mac using the RemoveNortonMacFiles tool
Download and run
RemoveNortonMacFiles as an administrator
Last login: Wed Oct 4 17:09:23 on ttys000
You have new mail.
/Users/richard**********/Downloads/RemoveNortonMacFiles/RemoveNortonMacFiles.command
; exit;
The default interactive shell is now
zsh.
To update your account to use zsh,
please run `chsh -s /bin/zsh`.
For more details, please visit https://support.apple.com/kb/HT208050.
iMac:~ richard*******$
/Users/richard*********/Downloads/RemoveNortonMacFiles/RemoveNortonMacFiles.command
; exit;
********* RemoveNortonMacFiles.command
8.0.12 *********
You must be an admin user to run this
script.
Please enter your admin password:
********* RemoveNortonMacFiles.command
8.0.12 *********
WARNING: This script will remove all
files and folders created by Norton
OS X products (except Symantec Adminstration Console for Macintosh
files) and any files within those folders. Therefore, you will
lose ALL files that reside in those folders, including any that
you have created.
1 - Remove all Norton files/folders.
2 - Quit. Do not remove any files.
Enter choice (1 or 2): 1
Removing Norton files...
Norton crontab entries were deleted
from the current boot volume.
There are no Symantec Scheduler launchd
plists to delete from the current boot
volume.
Removing Norton login items from:
"/Library/Preferences/loginwindow.plist"
Locating invisible Norton files in: /
Looking for predelete scripts in Norton
uninstaller's Receipts folder
Looking for predelete scripts in
/Library/Receipts
Removing system profile if it exists:
com.symc.enroll
*** There are no Norton processes in
memory
Locating visible Norton files in: /
Removing: "/etc/liveupdate.conf"
Removing: "/etc/Symantec.conf"
Removing: "/Library/Application Support/NAV.history"
Removing: "/Library/PrivateFrameworks/NPF.framework"
Removing: "/Library/PrivateFrameworks/NPFDataSource.framework"
Removing:
"/Library/PrivateFrameworks/SymAppKitAdditions.framework"
Removing: "/Library/PrivateFrameworks/SymBase.framework"
Removing: "/Library/PrivateFrameworks/SymNetworking.framework"
Removing: "/Library/PrivateFrameworks/SymSystem.framework"
Removing: "/opt"
Removing: "/Library/Preferences/com.symantec.NPF.plist"
Removing:
"/Library/Preferences/Network/com.Symantec.LiveUpdate.plist"
Removing: "/Library/Preferences/Network"
Looking for Norton login keychain items
Norton files/folders not removed:
/Users/richard***********/Applications
NOTE: Not all folders/files were
removed.
Perhaps a file or folder listed above is in use or a folder
listed above is not empty.
Some Norton product files have been
removed from the boot volume.
NOTE: You should now restart the
computer to get Norton processes
and kexts out of memory and/or to remove login items.
Do you wish to restart the computer now (y/n)?
and
/opt = item not found
the other items listed have not been found in Finder Go
Elementary info search remains after shutdown.
This appeared when i pushed the link button in the email, looked it up but did not see any answer so I logged into Apple community, returned to the email and pushed the button which worked .
The pop up remains warning me but not permitting removal.
What next please John?
One must have sneaked thru.
When I retired 19 years ago it was from a head office that used microsoft world wide and I had to use the HO technical development team to keep my work machine running. On my own without Technical support upstairs I purchased an Apple. I have never downloaded Norton because I rely on Mac to work. Had a dispute with my ISP and took them to the adjudicator and later advised the adjudicator that since my dispute went live I had received 14 - 20 phishing emails each day. The ISP denied any connection and since that denial phishing has dropped to 2/3 per week. All reported to National Cyber Security Centre. One must have sneaked thru.
Boot into Safe Mode according to How to use safe mode on your Mac and try deleting from there.
Note: if you have a wireless keyboard with rechargeable batteries connect it with its charging cable before booting into Safe Mode. This makes it act as a wired keyboard as will assure a successful boot into Safe Mode.
Good so far. In an effort to find the offending file, please consider downloading and running EtreCheck and posting its report in a reply. Instructions and a download link are here: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community.
Normally, one would search for a file with that name so that it can be dragged to the Trash (Bin) as the dialog suggests, but certain malicious or simply ill-conceived or poorly implemented software will obscure it. So, it's unlikely you will find a file by that name on your Mac. EtreCheck may help identify the suspicious file or files. Eradicating it would be the next step.
What next please John?
One must have sneaked thru.
I suppose so. The next step is to contact Apple: Official Apple Support. Before you do that though, re-run EtreCheck and examine it yourself for any remaining "Norton" components. Of course you are welcome to post a new report here if you think it would be beneficial.
Thanks, that is helpful information, although it may fall short of a complete solution.
One obvious culprit is "Symantec" also known as "Norton" which falls into a category of products that must never be installed on Macs. The EtreCheck report indicates that its kernel extension is "not loaded" which is a good thing in that macOS is protecting itself from its effects.
That leaves you with the unwelcome "will damage your Mac" annoyance, which will continue until all of its components are thoroughly and permanently eradicated from that Mac. The question is how to do that. By way of unsolicited comments please be advised that as a rule I do permit those kinds of modifications on my Macs, but moreover I do not know how to remove them. So I can't tell you exactly what to do, other than to direct you toward Symantec's uninstallation instructions, here:
Either one (or both) may help, but if they do not then all I can suggest is to contact Symantec and ask for their assistance.
Other than that, Microsoft Silverlight and Shockwave are both outdated products (and as such, potential security threats) that should be removed, but I do not have reason to believe they are the cause of the problem at hand. Refer to their respective uninstallation instructions in the same manner as "Symantec" / "Norton".
I believe that this will fall short of a complete solution, but please let me know if you don't get anywhere. The next step might be to contact Apple.
Thank you for your reply.
the warning has popped up after deleting the two numerical files from Application Support, closing down and re opening twice in between checking that the files had gone from Application support.
What should I try next to identify and remove this file and the associated warning?
Many thanks John
The free Malwarebytes may take care of it...
https://www.malwarebytes.com/mac/
Delete these files & restart...
/Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist
~/Library/LaunchAgents/com.adobe.ARM.***.plist
~ tilde indicates your user library folder
Apple hid the Users' Library folders...
Method 1:
1 From the Finder, select the Go menu at top of the screen, and choose Go to Folder.
2 In the window that opens, enter ~/Library, and click Go.
The Symantec instructions I linked are just a starting point. You need to search their website for Mac-specific uninstallation instructions.
The instructions I linked in my earlier reply should work. They were updated recently.
"exe" files won't work, so I think you went off in the wrong direction there.
Hello John
Problem resolved
I made another etrecheck and prepared a report for Apple and thought the only thing I have not done is empty trash after deleting the recommended files. I have rebooted twice to confirm the popup has gone.
Thank you very much for the time and trouble you took to advise me.
The following were not cleared by the Norton uninstall tool
/Library/Extensions
[Not Loaded] KTUM.kext - com.Symantec.kext.KTUM (9.0.3)
[Not Loaded] SymEvent.kext - com.Symantec.kext.SymEvent (1.0.4)
[NotLoaded] SymOSXKernelUtilities.kext - com.Symantec.kext.SymOSXKernelUtilities(2.0.1)
I suspect they are not a problem.
Thank you very much for your help and support
Great! Thanks for the update.
EtreCheckPro report attached in additional text
Many thanks for your continuing help and advice
Richard
I think I am out of my depth and at the end of my ability
report in notes
[Edited by Moderator]
two long numerical files that
look as though they should be deleted .
You should definitely move those two to the Trash. Then, restart your Mac.
Since they aren't loaded, not a problem as you say, but I'd delete them.
Elementary Info Search alert will not delete